Summary: | x11-libs/gtk+-2*, media-libs/gdk-pixbuf: Multiple Image Decoding Vulnerabilities | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | Gentoo Security | Reporter: | Matthias Geerdsen (RETIRED) <vorlon> | ||||||
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> | ||||||
Status: | RESOLVED FIXED | ||||||||
Severity: | major | CC: | gnome | ||||||
Priority: | High | ||||||||
Version: | unspecified | ||||||||
Hardware: | All | ||||||||
OS: | All | ||||||||
URL: | http://bugzilla.gnome.org/show_bug.cgi?id=150601 | ||||||||
Whiteboard: | A2 [glsa] jaervosz | ||||||||
Package list: | Runtime testing required: | --- | |||||||
Bug Depends on: | |||||||||
Bug Blocks: | 64135 | ||||||||
Attachments: |
|
Description
Matthias Geerdsen (RETIRED)
2004-09-16 03:06:34 UTC
Note that this also affects the version of gdk-pixbuf in x11-libs/gtk+-2.4.4. *** Bug 64233 has been marked as a duplicate of this bug. *** Same vulnerability, two packages affected : x11-libs/gtk+ media-libs/gdk-pixbuf CAN-2004-0753 CAN-2004-0782 CAN-2004-0783 CAN-2004-0788 Created attachment 39701 [details, diff]
gdk-pixbuf-0.22.0-CAN-2004-0753.patch
Mandrake gdk-pixbuf-0.22.0-CAN-2004-0753.patch
Created attachment 39702 [details, diff]
gdk-pixbuf-0.22.0-rh-alt-bound.patch
Mandrake gdk-pixbuf-0.22.0-rh-alt-bound.patch
For good reason I'm not on the gnome team. RH SRPMs can be found here: ftp://updates.redhat.com/enterprise/3desktop/en/os/SRPMS/ Mandrake SRPMs here: ftp://spirit.profinet.sk/mirrors/Mandrake/updates/10.0/SRPMS Updated Mandrake advisory : http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:095-1 "The previous package had an incorrect patch applied that would cause some problems with other programs. The updated packages have the correct patch applied. As well, patched gtk+2 packages, which also contain gdk-pixbuf, are now provided." Added gtk+-2.4.9-r1 & gdk-pixbuf-0.22.0-r3 with patches for these issues. Marked both stable on x86. amd64 stable stable on ppc Sparc stable. SeJo: gdk-pixbuf wasn't marked ppc stable, apparently you only marked gtk+. Stable on alpha. arm/hppa/ia64/ppc done Thx everyone. Ready for a GLSA. GLSA 200409-28 stable on ppc64, thanks! Stable on mips. |