From:	 Eridani Star System <linux@eridani.co.uk>
To:	 eridani-announce@eridani.co.uk
Subject: [Eridani-Announce] ERISA-2002:011 - imlib
Date:	 Wed, 27 Mar 2002 20:46:31 +0000 (GMT)

=========================================================================
		ERIDANI LINUX - SECURITY ANNOUNCEMENT
=========================================================================

Package:	imlib
Summary:	Untrusted images can cause crashes and run arbitrary code
Date:		2002-03-27
ID:		ERISA-2002:011

=========================================================================

Problem description:

  Versions of imlib prior to 1.9.13 used the NetPBM package in fall-back
  situations, which had several problems associated with it making it
  unsafe for handling untrusted images.  These problems make it possible
  for attackers to create image files such that when loaded via software
  which uses Imlib, could crash the program or potentially allow arbitrary
  code to be executed.

-------------------------------------------------------------------------
Updated packages:

  c2486f6afb7686a26f83f3035843555f  imlib-1.9.13-2.src.rpm

  6e324dd23cd8a47b37de01a00eec18eb  imlib-1.9.13-2.i386.rpm
  add0e3e58320ae6324f387601957f49d  imlib-cfgeditor-1.9.13-2.i386.rpm
  a3a41d71d1b17da2e2085f6e31b248b1  imlib-devel-1.9.13-2.i386.rpm

=========================================================================

Packages available from ftp://ftp.eridani.co.uk/pub/Aeryn/
or by HTTP from http://ftp.eridani.co.uk/

Packages are signed with our GNU GPG key, also on our FTP site.

Users of releases of Eridani Linux prior to 6.3 are advised to download   
the source RPM and rebuild for their system.

Copyright (C)2002 Eridani Star System

-- Michael "Soruk" McConnell                       http://www.eridani.co.uk
Eridani Linux  --  The Most Up-to-Date Red Hat-based Linux CDROMs Available
Email: linux@eridani.co.uk -- Also Debian, Slackware, Mandrake and more...


_______________________________________________
Eridani-Announce mailing list
To be removed from this list email linux@eridani.co.uk requesting removal.