package: argyll
severity: important
tags: security

Hi,

CVE-2009-0792 has been issued for argyll.  The details are:

  Multiple integer overflows and multiple insufficient upper-bounds
  checks on certain variable sizes were originally discovered in the
  Ghostscript's International Color Consortium Format Library (icclib).
  It was found,  the original patch, addressing this issue was
  incomplete.

For more details, see the fedora security announcement [1].

Please be sure to include the CVE number in your changelog if you
upload a fix.

Regards,
Mike

[1] http://lwn.net/Articles/328044/



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to