Mageia alert MGASA-2016-0144 (imlib2)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2016-0144: Updated imlib2 packages fix CVE-2016-4024 
Date:
    	     
 
Thu, 21 Apr 2016 16:52:55 +0200
Message-ID:
    	     
 
<20160421145255.7DF869F642@duvel.mageia.org>
MGASA-2016-0144 - Updated imlib2 packages fix CVE-2016-4024

Publication date: 21 Apr 2016
URL: http://advisories.mageia.org/MGASA-2016-0144.html

Type: security
Affected Mageia releases: 5
CVE: CVE-2016-4024

Description:
Updated imlib2 packages fix security vulnerability:

Integer overflow in imlib2 1.4.8 on 32-bit machines leads to insufficient heap 
allocation and heap overwrite in many image loaders, potentially resulting in
remote code execution (CVE-2016-4024).

References:
- https://bugs.mageia.org/show_bug.cgi?id=18210

- http://openwall.com/lists/oss-security/2016/04/14/8

- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4024


SRPMS:
- 5/core/imlib2-1.4.8-1.1.mga5