=========================================================== 
Ubuntu Security Notice USN-595-1             March 26, 2008
sdl-image1.2 vulnerabilities
CVE-2007-6697, CVE-2008-0544
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 6.10
Ubuntu 7.04
Ubuntu 7.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libsdl-image1.2                 1.2.4-1ubuntu0.1

Ubuntu 6.10:
  libsdl-image1.2                 1.2.5-2ubuntu0.6.10.1

Ubuntu 7.04:
  libsdl-image1.2                 1.2.5-2ubuntu0.7.04.1

Ubuntu 7.10:
  libsdl-image1.2                 1.2.5-3ubuntu0.1

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

Michael Skladnikiewicz discovered that SDL_image did not correctly load
GIF images.  If a user or automated system were tricked into processing
a specially crafted GIF, a remote attacker could execute arbitrary code
or cause a crash, leading to a denial of service. (CVE-2007-6697)

David Raulo discovered that SDL_image did not correctly load ILBM images.
If a user or automated system were tricked into processing a specially
crafted ILBM, a remote attacker could execute arbitrary code or cause
a crash, leading to a denial of service. (CVE-2008-0544)


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2_1.2.4-1ubuntu0.1.diff.gz
      Size/MD5:    27731 f25861d21b3b2222ff604b849c3842fb
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2_1.2.4-1ubuntu0.1.dsc
      Size/MD5:      703 4a7bab926b499874e626476a24d59192
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2_1.2.4.orig.tar.gz
      Size/MD5:   841885 70bf617f99e51a2c94550fc79d542f0b

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.4-1ubuntu0.1_amd64.deb
      Size/MD5:    34740 ab68facb50821f78f5d4511bce334a51
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.4-1ubuntu0.1_amd64.deb
      Size/MD5:    28972 1e1a9448740510f93fe01bd88d46b502

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.4-1ubuntu0.1_i386.deb
      Size/MD5:    31012 e838fe7522ad48cdfc95bfdc73de320f
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.4-1ubuntu0.1_i386.deb
      Size/MD5:    26768 93e3957bb91a6268bb1030155f955f4d

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.4-1ubuntu0.1_powerpc.deb
      Size/MD5:    35198 117d57af8e4ce8e55315dcfd9749ebf3
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.4-1ubuntu0.1_powerpc.deb
      Size/MD5:    29798 60d44fc21e806b31c03760aebcf14b64

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.4-1ubuntu0.1_sparc.deb
      Size/MD5:    32956 fede4369525cfe7e1b0f03c95a700ba7
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.4-1ubuntu0.1_sparc.deb
      Size/MD5:    27422 7adb8093da72732c65ce0dc0bb76d932

Updated packages for Ubuntu 6.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2_1.2.5-2ubuntu0.6.10.1.diff.gz
      Size/MD5:    12438 722a44ed315b6bd0761bd4b55491b4c2
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2_1.2.5-2ubuntu0.6.10.1.dsc
      Size/MD5:      715 ed059f756a27f70abad413f43813dfe6
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2_1.2.5.orig.tar.gz
      Size/MD5:  1308637 cd006109a73bf7dcc93e1c3ed15ee782

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.5-2ubuntu0.6.10.1_amd64.deb
      Size/MD5:    38162 e70127ca5a699f4ae80d25f4393eb2b1
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.5-2ubuntu0.6.10.1_amd64.deb
      Size/MD5:    31304 9d1e30e1dbc8a47d50347fec9e2ae308

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.5-2ubuntu0.6.10.1_i386.deb
      Size/MD5:    34772 25d73b30f2fad8dbb592446b623d10d4
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.5-2ubuntu0.6.10.1_i386.deb
      Size/MD5:    29518 b0a4357caad50210e006d5714e9ba4ce

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.5-2ubuntu0.6.10.1_powerpc.deb
      Size/MD5:    39348 b68e0281277b12ee0b60ac03a9793d9f
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.5-2ubuntu0.6.10.1_powerpc.deb
      Size/MD5:    32732 d0d78d804a532f8fdef5458317871f9f

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.5-2ubuntu0.6.10.1_sparc.deb
      Size/MD5:    36452 1fe5217484b152f2fe564e82ebbbc94b
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.5-2ubuntu0.6.10.1_sparc.deb
      Size/MD5:    29856 bcad33139b674dd652af6fcc48c607a8

Updated packages for Ubuntu 7.04:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2_1.2.5-2ubuntu0.7.04.1.diff.gz
      Size/MD5:    12496 b7fab5d4c24566e0b6687c4f1965d356
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2_1.2.5-2ubuntu0.7.04.1.dsc
      Size/MD5:      799 1164a9560c489027b5f7c35c0ff88940
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2_1.2.5.orig.tar.gz
      Size/MD5:  1308637 cd006109a73bf7dcc93e1c3ed15ee782

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.5-2ubuntu0.7.04.1_amd64.deb
      Size/MD5:    38086 3865a5c45b1f93f85093d497605978da
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.5-2ubuntu0.7.04.1_amd64.deb
      Size/MD5:    31678 6ffdff8cd099fa61bbd642010855470b

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.5-2ubuntu0.7.04.1_i386.deb
      Size/MD5:    34636 1101c9993d3bd36dce2b30d49c13e735
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.5-2ubuntu0.7.04.1_i386.deb
      Size/MD5:    29846 e45ba5dbe02a80dabfe2bfe9a14eb0de

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.5-2ubuntu0.7.04.1_powerpc.deb
      Size/MD5:    39218 3a9de5d81673a486dcd67422b04cba3d
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.5-2ubuntu0.7.04.1_powerpc.deb
      Size/MD5:    34488 a99d88e2c4f4be1bf9b54a4408b6da9f

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.5-2ubuntu0.7.04.1_sparc.deb
      Size/MD5:    36304 7800adda592b293e5b3bddba909765d1
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.5-2ubuntu0.7.04.1_sparc.deb
      Size/MD5:    30212 94bffe0f402269e7d697c5c2a42ab8ec

Updated packages for Ubuntu 7.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2_1.2.5-3ubuntu0.1.diff.gz
      Size/MD5:    27013 918b44bd4851bc05e539d0b4462da7aa
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2_1.2.5-3ubuntu0.1.dsc
      Size/MD5:      789 e8c98a5eba6615818895b7c7df91e294
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2_1.2.5.orig.tar.gz
      Size/MD5:  1308637 cd006109a73bf7dcc93e1c3ed15ee782

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.5-3ubuntu0.1_amd64.deb
      Size/MD5:    38238 d972ea754a2ad5267e861fbfbc685ffb
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.5-3ubuntu0.1_amd64.deb
      Size/MD5:    31760 cf98987b70c07bf213d872db9de38d48

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.5-3ubuntu0.1_i386.deb
      Size/MD5:    34732 6302e8d01dbdb7abcbf73c3b29da4260
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.5-3ubuntu0.1_i386.deb
      Size/MD5:    29892 c9dab7a7643a65e78b2abfe56074679e

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.5-3ubuntu0.1_powerpc.deb
      Size/MD5:    39326 79e6eca19a9b299fa6889125705371e7
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.5-3ubuntu0.1_powerpc.deb
      Size/MD5:    34546 9c67ead459d5ac24e3851e7aca6f1771

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2-dev_1.2.5-3ubuntu0.1_sparc.deb
      Size/MD5:    36364 5dc30616c96abfaf72bf409bca419f83
    http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image1.2_1.2.5-3ubuntu0.1_sparc.deb
      Size/MD5:    30324 a04f1db06575cd845bab268ce7231264