LWN.net Logo

Fedora alert FEDORA-2005-267 (gtk2)

From:  Matthias Clasen <mclasen@redhat.com>
To:  fedora-announce-list@redhat.com
Subject:  [SECURITY] Fedora Core 2 Update: gtk2-2.4.14-2.fc2
Date:  Wed, 30 Mar 2005 13:53:26 -0500

--------------------------------------------------------------------- Fedora Update Notification FEDORA-2005-267 2005-03-30 --------------------------------------------------------------------- Product : Fedora Core 2 Name : gtk2 Version : 2.4.14 Release : 2.fc2 Summary : The GIMP ToolKit (GTK+), a library for creating GUIs for X. Description : GTK+ is a multi-platform toolkit for creating graphical user interfaces. Offering a complete set of widgets, GTK+ is suitable for projects ranging from small one-off tools to complete application suites. --------------------------------------------------------------------- Update Information: David Costanzo found a bug in the way GTK+ processes BMP images. It is possible that a specially crafted BMP image could cause a denial of service attack in applications linked against GTK+. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-0891 to this issue. --------------------------------------------------------------------- * Mon Mar 28 2005 Matthias Clasen <mclasen@redhat.com> - 2.4.14-2.fc2 - Fix a double free in the bmp loader --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/u... e554a876457e37b8a432191af098b455 SRPMS/gtk2-2.4.14-2.fc2.src.rpm e0ab627f18c00ea25257d7c0e82baa30 x86_64/gtk2-2.4.14-2.fc2.x86_64.rpm bffbdf4fb9ad6c0803c61994b4f3f125 x86_64/gtk2- devel-2.4.14-2.fc2.x86_64.rpm 64febbae57060204343e0f212279a3b8 x86_64/debug/gtk2- debuginfo-2.4.14-2.fc2.x86_64.rpm 40137c8115b35e5f92cc4ac764b7c04e x86_64/gtk2-2.4.14-2.fc2.i386.rpm 40137c8115b35e5f92cc4ac764b7c04e i386/gtk2-2.4.14-2.fc2.i386.rpm 1fd50f68800ac67282143c0d02e5be09 i386/gtk2-devel-2.4.14-2.fc2.i386.rpm 749b4834dfe87cdcf3133a9d859e5b91 i386/debug/gtk2- debuginfo-2.4.14-2.fc2.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. --------------------------------------------------------------------- -- fedora-announce-list mailing list fedora-announce-list@redhat.com http://www.redhat.com/mailman/listinfo/fedora-announce-list


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds