Gentoo alert 200307-05 (gtksee)

From:
    	     
 
aliz@gentoo.org (Daniel Ahlberg)
To:
    	     
 
gentoo-announce@gentoo.org
Subject:
    	     
 
GLSA:  gtksee (200307-05)
Date:
    	     
 
Fri, 11 Jul 2003 16:44:28 +0200 (CEST)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200307-05
- - - ---------------------------------------------------------------------

          PACKAGE : gtksee
          SUMMARY : buffer overflow
             DATE : 2003-07-11 14:44 UTC
          EXPLOIT : local
VERSIONS AFFECTED : <gtksee-0.5.2
    FIXED VERSION : >=gtksee-0.5.2
              CVE : CAN-2003-0444

- - - ---------------------------------------------------------------------

Attackers can use carefully crafted png pictures to execute arbitrary
commands using a buffer overflow in when viewed in gtksee.

SOLUTION

It is recommended that all Gentoo Linux users who are running
media-gfx/gtksee upgrade to gtksee-0.5.2 as follows

emerge sync
emerge gtksee
emerge clean

- - - ---------------------------------------------------------------------
aliz@gentoo.org - GnuPG key is available at http://dev.gentoo.org/~aliz
- - - ---------------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/Ds1MfT7nyhUpoZMRAk6PAJ4xSgxRQP2qxFtVcn/8rVTeeRV9PACguNFC
M+y/tKsm3IkmfB9YZqwETYA=
=bIk6
-----END PGP SIGNATURE-----