[SECURITY] Fedora Core 2 Update: gtk2-2.4.7-2.4
by Matthias Clasen
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-289
2004-09-15
---------------------------------------------------------------------
Product : Fedora Core 2
Name : gtk2
Version : 2.4.7
Release : 2.4
Summary : The GIMP ToolKit (GTK+), a library for creating GUIs for
X.
Description :
GTK+ is a multi-platform toolkit for creating graphical user
interfaces. Offering a complete set of widgets, GTK+ is suitable for
projects ranging from small one-off tools to complete application
suites.
---------------------------------------------------------------------
Update Information:
During testing of a previously fixed flaw in Qt (CAN-2004-0691), a flaw
was
discovered in the BMP image processor of gtk2. An attacker could create
a
carefully crafted BMP file which would cause an application to enter an
infinite loop and not respond to user input when the file was opened by
a
victim. The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name CAN-2004-0753 to this issue.
During a security audit Chris Evans discovered a stack and a heap
overflow
in the XPM image decoder. An attacker could create a carefully crafted
XPM
file which could cause an application linked with gtk2 to crash or
possibly
execute arbitrary code when the file was opened by a victim.
(CAN-2004-0782, CAN-2004-0783)
Chris Evans also discovered an integer overflow in the ICO image
decoder.
An attacker could create a carefully crafted ICO file which could cause
an
application linked with gtk2 to crash when the file was opened by a
victim.
(CAN-2004-0788)
---------------------------------------------------------------------
* Tue Sep 07 2004 Matthias Clasen <mclasen(a)redhat.com> - 2.4.7-2.4
- Fix issues in the xpm and ico loaders
found by Chris Evans (#130711)
* Fri Aug 20 2004 Owen Taylor <otaylor(a)redhat.com> - 2.4.7-2.2
- Fix problem with infinite loop on bad BMP data (#130450,
test BMP from Chris Evans, fix from Manish Singh)
* Sat Aug 14 2004 Matthias Clasen <mclasen(a)redhat.com> 2.4.7-1
- update to 2.4.7
* Fri Aug 13 2004 Matthias Clasen <mclasen(a)redhat.com> 2.4.6-1
- update to 2.4.6
- call libtoolize --force to win .so's back...
* Fri Jul 30 2004 Jonathan Blandford <jrb(a)redhat.com> 2.4.4-4
- add typeahead patch to GtkTreeView
- automake-1.9
* Tue Jul 27 2004 Matthias Clasen <mclasen(a)redhat.com> - 2.4.4-3
- Use -64 suffix on powerpc64. (#128605)
* Fri Jul 16 2004 Matthias Clasen <mclasen(a)redhat.com> - 2.4.4-2
- Fix permissions of gdk-pixbuf-csource script.
- Escape macros in %changelog
* Fri Jul 09 2004 Matthias Clasen <mclasen(a)redhat.com> - 2.4.4-1
- Update to 2.4.4
* Thu Jul 08 2004 Matthias Clasen <mclasen(a)redhat.com> - 2.4.1-5
- Look for the gtk.immodules file in the right location. (#127073)
* Thu Jul 08 2004 Matthias Clasen <mclasen(a)redhat.com> - 2.4.1-4
- Add a wrapper for gdk-pixbuf-csource.
* Wed Jun 23 2004 Matthias Clasen <mclasen(a)redhat.com> - 2.4.1-3
- Don't install testgtk and testtext
- Rename binaries to -32/-64 (#124478)
- Move arch-dependent config files to /etc/gtk-2.0/$host (#124482)
- Add wrappers for updating the arch-dependent config files
* Tue Jun 15 2004 Elliot Lee <sopwith(a)redhat.com>
- rebuilt
* Thu May 20 2004 Matthias Clasen <mclasen(a)redhat.com> - 2.4.1-1
- Upgrade to 2.4.1
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
75a86a6d678f76a2f6238a992463005f SRPMS/gtk2-2.4.7-2.4.src.rpm
f6923be90c1621e83a19df610213ff12 x86_64/gtk2-2.4.7-2.4.x86_64.rpm
e46b3ea2a153749dcf6d5cdf38603ea6 x86_64/gtk2-devel-2.4.7-2.4.x86_64.rpm
81f2cf32b341d60fa766e638624a201c
x86_64/debug/gtk2-debuginfo-2.4.7-2.4.x86_64.rpm
b659bb38815921f415c45790d2c4b1c6 x86_64/gtk2-2.4.7-2.4.i386.rpm
b659bb38815921f415c45790d2c4b1c6 i386/gtk2-2.4.7-2.4.i386.rpm
9d38f480c8ccb6857fc6cbdb322ac073 i386/gtk2-devel-2.4.7-2.4.i386.rpm
5099d6ef8357b99e90e9fa2fd9c28695
i386/debug/gtk2-debuginfo-2.4.7-2.4.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 6 months
[SECURITY] Fedora Core 2 Update: gdk-pixbuf-0.22.0-11.2.3
by Matthias Clasen
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-287
2004-09-15
---------------------------------------------------------------------
Product : Fedora Core 2
Name : gdk-pixbuf
Version : 0.22.0
Release : 11.2.3
Summary : An image loading library used with GNOME.
Description :
The gdk-pixbuf package contains an image loading library used with the
GNOME GUI desktop environment. The GdkPixBuf library provides image
loading facilities, the rendering of a GdkPixBuf into various formats
(drawables or GdkRGB buffers), and a cache interface.
---------------------------------------------------------------------
Update Information:
During testing of a previously fixed flaw in Qt (CAN-2004-0691), a flaw
was
discovered in the BMP image processor of gdk-pixbuf. An attacker could
create a carefully crafted BMP file which would cause an application
to enter an infinite loop and not respond to user input when the file
was
opened by a victim. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2004-0753 to this issue.
During a security audit, Chris Evans discovered a stack and a heap
overflow
in the XPM image decoder. An attacker could create a carefully crafted
XPM
file which could cause an application linked with gtk2 to crash or
possibly
execute arbitrary code when the file was opened by a victim.
(CAN-2004-0782, CAN-2004-0783)
Chris Evans also discovered an integer overflow in the ICO image
decoder.
An attacker could create a carefully crafted ICO file which could cause
an
application linked with gtk2 to crash when the file is opened by a
victim.
(CAN-2004-0788)
---------------------------------------------------------------------
* Tue Sep 07 2004 Matthias Clasen <mclasen(a)redhat.com> - 1:0.22.0-11.2.3
- Rebuild for FC2
* Fri Sep 03 2004 Matthias Clasen <mclasen(a)redhat.com> - 1:0.22.0-11.2.2
- Rebuild for FC1
* Fri Sep 03 2004 Matthias Clasen <mclasen(a)redhat.com> - 1:0.22.0-11.1.3
- Rebuild for RHEL3
* Fri Sep 03 2004 Matthias Clasen <mclasen(a)redhat.com> -
1:0.22.0-11.1.2E
- Fix issues in the xpm and ico loaders
found by Chris Evans (#130711)
* Fri Aug 20 2004 Owen Taylor <otaylor(a)redhat.com> - 1:0.22.0-10.0.2E
- Fix problem with infinite loop on bad BMP data (#130455,
test BMP from Chris Evans, fix from Manish Singh)
* Sun Aug 15 2004 Tim Waugh <twaugh(a)redhat.com> 1:0.22.0-9
- Fixed underquoted m4 definition.
* Mon Jun 21 2004 Matthias Clasen <mclasen(a)redhat.com>
- Make build
* Tue Jun 15 2004 Elliot Lee <sopwith(a)redhat.com>
- rebuilt
* Fri Mar 05 2004 Owen Taylor <otaylor(a)redhat.com> 1:0.22.0-6.0.3
- Include /usr/lib/*.la for AS2.1
* Fri Mar 05 2004 Owen Taylor <otaylor(a)redhat.com> 1:0.22.0-6.0.2E
- Add some additional defines to work with 2.1AS
* Thu Mar 04 2004 Owen Taylor <otaylor(a)redhat.com> 1:0.22.0-6.1.1
- Bump and rebuild
* Thu Mar 04 2004 Owen Taylor <otaylor(a)redhat.com> 1:0.22.0-6.1.0
- Redo package to build without libtool-1.5 patch
* Wed Mar 03 2004 Owen Taylor <otaylor(a)redhat.com> 1:0.22.0-6.0.0
- Add a couple of bug-fixes backported from GTK+-2.x
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
df423014919ec5696f889ac6f4787746 SRPMS/gdk-pixbuf-0.22.0-11.2.3.src.rpm
b0c43651dc3ce287199500dfcc2f0587
x86_64/gdk-pixbuf-0.22.0-11.2.3.x86_64.rpm
7e7fc5ed5415290c782869c4b4891cbf
x86_64/gdk-pixbuf-devel-0.22.0-11.2.3.x86_64.rpm
144f31eb04ea373b7e03c7c0478956e9
x86_64/gdk-pixbuf-gnome-0.22.0-11.2.3.x86_64.rpm
3eab7a99d72773cc58f9ae76020170d7
x86_64/debug/gdk-pixbuf-debuginfo-0.22.0-11.2.3.x86_64.rpm
7191295371d1375fa214aae40ed552ad i386/gdk-pixbuf-0.22.0-11.2.3.i386.rpm
1312362346782b79454397d5116c3401
i386/gdk-pixbuf-devel-0.22.0-11.2.3.i386.rpm
26640728f906fbc08f11302aea0c551d
i386/gdk-pixbuf-gnome-0.22.0-11.2.3.i386.rpm
5e6d6f574976df72d29a33e19e178aaa
i386/debug/gdk-pixbuf-debuginfo-0.22.0-11.2.3.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 6 months
[SECURITY] Fedora Core 1 Update: gtk2-2.2.4-10
by Matthias Clasen
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-288
2004-09-15
---------------------------------------------------------------------
Product : Fedora Core 1
Name : gtk2
Version : 2.2.4
Release : 10
Summary : The GIMP ToolKit (GTK+), a library for creating GUIs for
X.
Description :
GTK+ is a multi-platform toolkit for creating graphical user
interfaces. Offering a complete set of widgets, GTK+ is suitable for
projects ranging from small one-off tools to complete application
suites.
---------------------------------------------------------------------
Update Information:
During testing of a previously fixed flaw in Qt (CAN-2004-0691), a flaw
was
discovered in the BMP image processor of gtk2. An attacker could create
a
carefully crafted BMP file which would cause an application to enter an
infinite loop and not respond to user input when the file was opened by
a
victim. The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name CAN-2004-0753 to this issue.
During a security audit Chris Evans discovered a stack and a heap
overflow
in the XPM image decoder. An attacker could create a carefully crafted
XPM
file which could cause an application linked with gtk2 to crash or
possibly
execute arbitrary code when the file was opened by a victim.
(CAN-2004-0782, CAN-2004-0783)
Chris Evans also discovered an integer overflow in the ICO image
decoder.
An attacker could create a carefully crafted ICO file which could cause
an
application linked with gtk2 to crash when the file was opened by a
victim.
(CAN-2004-0788)
---------------------------------------------------------------------
* Fri Sep 03 2004 Matthias Clasen <mclasen(a)redhat.com> - 2.2.4-10
- Fix issues in the xpm and ico loaders
found by Chris Evans (#130711)
* Fri Aug 20 2004 Owen Taylor <otaylor(a)redhat.com> - 2.2.4-7.1
- Fix problem with infinite loop on bad BMP data (#130450,
test BMP from Chris Evans, fix from Manish Singh)
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
d4ae88a59943ed19fb84c197b3800a43 SRPMS/gtk2-2.2.4-10.src.rpm
cc87e91fff48e744beda9e0f3cbb9d22 x86_64/gtk2-2.2.4-10.x86_64.rpm
eb595b4bd917e25abf6e7730bedcf5e0 x86_64/gtk2-devel-2.2.4-10.x86_64.rpm
85d64ebbf05e414c69d05195fc213704
x86_64/debug/gtk2-debuginfo-2.2.4-10.x86_64.rpm
04c0745cf4dde875344ed93ab38dae8a x86_64/gtk2-2.2.4-10.i386.rpm
04c0745cf4dde875344ed93ab38dae8a i386/gtk2-2.2.4-10.i386.rpm
d66eac1eb88431474a089dee707eb0fc i386/gtk2-devel-2.2.4-10.i386.rpm
3d7cf237b8c83d0de2cc74c3c4060567
i386/debug/gtk2-debuginfo-2.2.4-10.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 6 months
[SECURITY] Fedora Core 1 Update: gdk-pixbuf-0.22.0-11.2.2
by Matthias Clasen
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-286
2004-09-15
---------------------------------------------------------------------
Product : Fedora Core 1
Name : gdk-pixbuf
Version : 0.22.0
Release : 11.2.2
Summary : An image loading library used with GNOME.
Description :
The gdk-pixbuf package contains an image loading library used with the
GNOME GUI desktop environment. The GdkPixBuf library provides image
loading facilities, the rendering of a GdkPixBuf into various formats
(drawables or GdkRGB buffers), and a cache interface.
---------------------------------------------------------------------
Update Information:
During testing of a previously fixed flaw in Qt (CAN-2004-0691), a flaw
was
discovered in the BMP image processor of gdk-pixbuf. An attacker could
create a carefully crafted BMP file which would cause an application
to enter an infinite loop and not respond to user input when the file
was
opened by a victim. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2004-0753 to this issue.
During a security audit, Chris Evans discovered a stack and a heap
overflow
in the XPM image decoder. An attacker could create a carefully crafted
XPM
file which could cause an application linked with gtk2 to crash or
possibly
execute arbitrary code when the file was opened by a victim.
(CAN-2004-0782, CAN-2004-0783)
Chris Evans also discovered an integer overflow in the ICO image
decoder.
An attacker could create a carefully crafted ICO file which could cause
an
application linked with gtk2 to crash when the file is opened by a
victim.
(CAN-2004-0788)
---------------------------------------------------------------------
* Fri Sep 03 2004 Matthias Clasen <mclasen(a)redhat.com> - 1:0.22.0-11.2.2
- Rebuild for FC1
* Fri Sep 03 2004 Matthias Clasen <mclasen(a)redhat.com> - 1:0.22.0-11.1.3
- Rebuild for RHEL3
* Fri Sep 03 2004 Matthias Clasen <mclasen(a)redhat.com> -
1:0.22.0-11.1.2E
- Fix issues in the xpm and ico loaders
found by Chris Evans (#130711)
* Fri Aug 20 2004 Owen Taylor <otaylor(a)redhat.com> - 1:0.22.0-10.0.2E
- Fix problem with infinite loop on bad BMP data (#130455,
test BMP from Chris Evans, fix from Manish Singh)
* Sun Aug 15 2004 Tim Waugh <twaugh(a)redhat.com> 1:0.22.0-9
- Fixed underquoted m4 definition.
* Mon Jun 21 2004 Matthias Clasen <mclasen(a)redhat.com>
- Make build
* Tue Jun 15 2004 Elliot Lee <sopwith(a)redhat.com>
- rebuilt
* Fri Mar 05 2004 Owen Taylor <otaylor(a)redhat.com> 1:0.22.0-6.0.3
- Include /usr/lib/*.la for AS2.1
* Fri Mar 05 2004 Owen Taylor <otaylor(a)redhat.com> 1:0.22.0-6.0.2E
- Add some additional defines to work with 2.1AS
* Thu Mar 04 2004 Owen Taylor <otaylor(a)redhat.com> 1:0.22.0-6.1.1
- Bump and rebuild
* Thu Mar 04 2004 Owen Taylor <otaylor(a)redhat.com> 1:0.22.0-6.1.0
- Redo package to build without libtool-1.5 patch
* Wed Mar 03 2004 Owen Taylor <otaylor(a)redhat.com> 1:0.22.0-6.0.0
- Add a couple of bug-fixes backported from GTK+-2.x
* Tue Mar 02 2004 Elliot Lee <sopwith(a)redhat.com>
- rebuilt
* Fri Feb 13 2004 Elliot Lee <sopwith(a)redhat.com>
- rebuilt
* Thu Aug 28 2003 Owen Taylor <otaylor(a)redhat.com> 1:0.22.0-4.0
- Rebuild for RHEL
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
19315b68f5108834ded2239186fc1983 SRPMS/gdk-pixbuf-0.22.0-11.2.2.src.rpm
1e2e3afb3290bbb1f4bd14eec8d16f90
x86_64/gdk-pixbuf-0.22.0-11.2.2.x86_64.rpm
2e96329747230323c2f2583f3cbd4764
x86_64/gdk-pixbuf-devel-0.22.0-11.2.2.x86_64.rpm
39d0264223d1f0e29b6ddd1f0c04809a
x86_64/gdk-pixbuf-gnome-0.22.0-11.2.2.x86_64.rpm
556265762760faffa27cf09a368e9c55
x86_64/debug/gdk-pixbuf-debuginfo-0.22.0-11.2.2.x86_64.rpm
ee240507ab220388cd0b37ccdb59b63d i386/gdk-pixbuf-0.22.0-11.2.2.i386.rpm
0f445a5b5745edf4e6de74742ea4bd46
i386/gdk-pixbuf-devel-0.22.0-11.2.2.i386.rpm
874699ea4c8ba8d5d2a9b467016ffc0a
i386/gdk-pixbuf-gnome-0.22.0-11.2.2.i386.rpm
bf148083099de37ab7332b2422d3331f
i386/debug/gdk-pixbuf-debuginfo-0.22.0-11.2.2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 6 months
[SECURITY] Fedora Core 2 Update: samba-3.0.7-2.FC2
by Jay Fenlason
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-305
2004-09-13
---------------------------------------------------------------------
Product : Fedora Core 2
Name : samba
Version : 3.0.7
Release : 2.FC2
Summary : The Samba SMB server.
Description :
Samba is the protocol by which a lot of PC-related machines share
files, printers, and other information (such as lists of available
files and printers). The Windows NT, OS/2, and Linux operating systems
support this natively, and add-on packages can enable the same thing
for DOS, Windows, VMS, UNIX of all kinds, MVS, and more. This package
provides an SMB server that can be used to provide network services to
SMB (sometimes called "Lan Manager") clients. Samba uses NetBIOS over
TCP/IP (NetBT) protocols and does NOT need the NetBEUI (Microsoft Raw
NetBIOS frame) protocol.
---------------------------------------------------------------------
Update Information:
This update corrects two Denial-of-Service attacks against
Samba-3.0.6.
This update may also fix other problems some people experienced with
Samba-3.0.6.
---------------------------------------------------------------------
* Mon Sep 13 2004 Jay Fenlason <fenlason(a)redhat.com> 3.0.7-2.FC2
- Upgrade to 3.0.7 to close CAN-2004-0807 and CAN-2004-0808
This obsoletes the 3.0.6-schema patch
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
61069685cc423f62d9a54bb2d95e267b SRPMS/samba-3.0.7-2.FC2.src.rpm
51d78f4c6c66dfd3ecf44735e17a0983 x86_64/samba-3.0.7-2.FC2.x86_64.rpm
10f92c274c213528d611bc9433942f50 x86_64/samba-client-3.0.7-2.FC2.x86_64.rpm
826765f1dd69ebb9c309bfed5af574d6 x86_64/samba-common-3.0.7-2.FC2.x86_64.rpm
77417c565740f526acfd105e5efb0e4b x86_64/samba-swat-3.0.7-2.FC2.x86_64.rpm
a0d8c7b1105306ff0cad72dbe924f688 x86_64/debug/samba-debuginfo-3.0.7-2.FC2.x86_64.rpm
b21fd9ddd2a3375a2db242f17e46020f i386/samba-3.0.7-2.FC2.i386.rpm
baa3b958f91fa31794e5945281526252 i386/samba-client-3.0.7-2.FC2.i386.rpm
4738750072856c0e7ae6329d5632b6ba i386/samba-common-3.0.7-2.FC2.i386.rpm
abde417fc55e40b37c19d1089aa59e6f i386/samba-swat-3.0.7-2.FC2.i386.rpm
8e78f2b1df0a73d250a662eaec5241c1 i386/debug/samba-debuginfo-3.0.7-2.FC2.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 6 months
[SECURITY] Fedora Core 1 Update: samba-3.0.7-2.FC1
by Jay Fenlason
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-304
2004-09-13
---------------------------------------------------------------------
Product : Fedora Core 1
Name : samba
Version : 3.0.7
Release : 2.FC1
Summary : The Samba SMB server.
Description :
Samba is the protocol by which a lot of PC-related machines share
files, printers, and other information (such as lists of available
files and printers). The Windows NT, OS/2, and Linux operating systems
support this natively, and add-on packages can enable the same thing
for DOS, Windows, VMS, UNIX of all kinds, MVS, and more. This package
provides an SMB server that can be used to provide network services to
SMB (sometimes called "Lan Manager") clients. Samba uses NetBIOS over
TCP/IP (NetBT) protocols and does NOT need the NetBEUI (Microsoft Raw
NetBIOS frame) protocol.
---------------------------------------------------------------------
Update Information:
This update addcesses two DoS errors in Samba-3.0.6
This update may also fix other problems some people experienced with
Samba-3.0.6.
---------------------------------------------------------------------
* Mon Sep 13 2004 Jay Fenlason <fenlason(a)redhat.com> 3.0.7-2.FC1
- Upgrade to 3.0.7, which fixes CAN-2004-0807 and CAN-2004-0808
This obsoletes the 3.0.6-schema patch.
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
9757e9ab6c2b6742bd0e7d43c90b5f68 SRPMS/samba-3.0.7-2.FC1.src.rpm
516c5f141a6c74d1e76916489b7df48b x86_64/samba-3.0.7-2.FC1.x86_64.rpm
09a4f7cf75a9092589f6a1059f427d2d x86_64/samba-client-3.0.7-2.FC1.x86_64.rpm
a324f7871f1c40efadca893f067a5435 x86_64/samba-common-3.0.7-2.FC1.x86_64.rpm
c9cdfc7a044dac9d0f437849a978cdd2 x86_64/samba-swat-3.0.7-2.FC1.x86_64.rpm
4a18debd87cd2debfe50f06477c3bbfb x86_64/debug/samba-debuginfo-3.0.7-2.FC1.x86_64.rpm
11948fe0d33a6d8e26f4c92c51017ec5 i386/samba-3.0.7-2.FC1.i386.rpm
aa07d73eb8a12251bf295fbf3bfa07e1 i386/samba-client-3.0.7-2.FC1.i386.rpm
21bc56202cdde5000cd20a33885e83e1 i386/samba-common-3.0.7-2.FC1.i386.rpm
dc9a604697deee540d613297ec1b7c1c i386/samba-swat-3.0.7-2.FC1.i386.rpm
77d193912e368ff09142d502b804ae96 i386/debug/samba-debuginfo-3.0.7-2.FC1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 6 months
[SECURITY] Fedora Core 2 Update: imlib-1.9.13-19
by Matthias Clasen
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-301
2004-09-09
---------------------------------------------------------------------
Product : Fedora Core 2
Name : imlib
Version : 1.9.13
Release : 19
Summary : An image loading and rendering library for X11R6.
Description :
Imlib is a display depth independent image loading and rendering
library. Imlib is designed to simplify and speed up the process of
loading images and obtaining X Window System drawables. Imlib
provides many simple manipulation routines which can be used for
common operations.
Install imlib if you need an image loading and rendering library for
X11R6, or if you are installing GNOME. You may also want to install
the imlib-cfgeditor package, which will help you configure Imlib.
---------------------------------------------------------------------
Update Information:
Several heap overflow vulnerabilities have been found in the imlib BMP
image handler. An attacker could create a carefully crafted BMP file in
such a way that it would cause an application linked with imlib to
execute
arbitrary code when the file was opened by a victim. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the
name
CAN-2004-0817 to this issue.
Users of imlib should update to this updated package which contains
backported patches and is not vulnerable to these issues.
---------------------------------------------------------------------
* Thu Sep 09 2004 Matthias Clasen <mclasen(a)redhat.com>
- security fixes
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
c6ed83101974d8283a4013a80e356c08 SRPMS/imlib-1.9.13-19.src.rpm
9f6952bd21d1157b4c10dde7f87b8a3d x86_64/imlib-1.9.13-19.x86_64.rpm
e70a8c0dec245aea672da1f1608e1e33
x86_64/imlib-devel-1.9.13-19.x86_64.rpm
64aa17fe9a0ea4efa9d48020212274c9
x86_64/imlib-cfgeditor-1.9.13-19.x86_64.rpm
48ef8b28ae79d1c7c82974e7f6b77e86
x86_64/debug/imlib-debuginfo-1.9.13-19.x86_64.rpm
d9d04d9df1981e22e45853789a99db19 i386/imlib-1.9.13-19.i386.rpm
9589803f0299131a91bf78ea62cf68c3 i386/imlib-devel-1.9.13-19.i386.rpm
b602fcb2d9d57b87abd57792b17c84c1
i386/imlib-cfgeditor-1.9.13-19.i386.rpm
fe0ab8902a4f20532cea1f1d988add08
i386/debug/imlib-debuginfo-1.9.13-19.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 6 months
[SECURITY] Fedora Core 1 Update: imlib-1.9.13-15.fc1
by Matthias Clasen
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-300
2004-09-09
---------------------------------------------------------------------
Product : Fedora Core 1
Name : imlib
Version : 1.9.13
Release : 15.fc1
Summary : An image loading and rendering library for X11R6.
Description :
Imlib is a display depth independent image loading and rendering
library. Imlib is designed to simplify and speed up the process of
loading images and obtaining X Window System drawables. Imlib
provides many simple manipulation routines which can be used for
common operations.
Install imlib if you need an image loading and rendering library for
X11R6, or if you are installing GNOME. You may also want to install
the imlib-cfgeditor package, which will help you configure Imlib.
---------------------------------------------------------------------
Update Information:
Several heap overflow vulnerabilities have been found in the imlib BMP
image handler. An attacker could create a carefully crafted BMP file in
such a way that it would cause an application linked with imlib to
execute
arbitrary code when the file was opened by a victim. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the
name
CAN-2004-0817 to this issue.
Users of imlib should update to this updated package which contains
backported patches and is not vulnerable to these issues.
---------------------------------------------------------------------
* Thu Sep 09 2004 Matthias Clasen <mclasen(a)redhat.com>
- Security fixes
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
03a77921e2efd86e0703d66de59cad1c SRPMS/imlib-1.9.13-15.fc1.src.rpm
7c819092b3f54e6fba51460f10d4d2db x86_64/imlib-1.9.13-15.fc1.x86_64.rpm
296479ab2f3ebfdb1b43c4454d881009
x86_64/imlib-devel-1.9.13-15.fc1.x86_64.rpm
5b66680b22684df822ef4f38d6e87a35
x86_64/imlib-cfgeditor-1.9.13-15.fc1.x86_64.rpm
f211ba31e2b13a872d0c318b4892c624
x86_64/debug/imlib-debuginfo-1.9.13-15.fc1.x86_64.rpm
8bd4bb9bbcad02a8442edd5bd6afd8f2 i386/imlib-1.9.13-15.fc1.i386.rpm
469d4ed01e2ba0b49fdcd0fa01323052
i386/imlib-devel-1.9.13-15.fc1.i386.rpm
fa26f3f2c7a877c806b675fc8de68203
i386/imlib-cfgeditor-1.9.13-15.fc1.i386.rpm
7d0d786eb8e5ea9793c2505267a2f650
i386/debug/imlib-debuginfo-1.9.13-15.fc1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 6 months
[SECURITY] Fedora Core 2 Update: cdrtools-2.01-0.a27.4.FC2.3
by Harald Hoyer
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-298
2004-09-09
---------------------------------------------------------------------
Product : Fedora Core 2
Name : cdrtools
Version : 2.01
Release : 0.a27.4.FC2.3
Summary : A collection of CD/DVD utilities.
Description :
cdrtools is a collection of CD/DVD utilities.
---------------------------------------------------------------------
Update Information:
Anyone who has manually suid /usr/bin/cdrecord should update to this version.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0806
---------------------------------------------------------------------
* Wed Sep 08 2004 Harald Hoyer <harald(a)redhat.com> - 8:2.01-0.a27.4.FC2.3
- added patch for CAN-2004-0806, if s.o. is so stupid to make cdrecord suid
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/
97a97d2384f9ab582736d985f6b8f302 SRPMS/cdrtools-2.01-0.a27.4.FC2.3.src.rpm
6dad4e7c175d300f9d7a0d2338139ca1 x86_64/cdrecord-2.01-0.a27.4.FC2.3.x86_64.rpm
3ca938e1c1c775bb774349e35dcca9c9 x86_64/cdrecord-devel-2.01-0.a27.4.FC2.3.x86_64.rpm
fc4ceb93fb901065cad26be9d6e4b222 x86_64/mkisofs-2.01-0.a27.4.FC2.3.x86_64.rpm
6697f963ed06d27bbafc15dbc4a57e15 x86_64/cdda2wav-2.01-0.a27.4.FC2.3.x86_64.rpm
4426a57a0edcdd96cfcd5235dd97ec86 x86_64/debug/cdrtools-debuginfo-2.01-0.a27.4.FC2.3.x86_64.rpm
df1786fde31756ea0e86cc6681a61036 i386/cdrecord-2.01-0.a27.4.FC2.3.i386.rpm
7290bd23cbdf9f2bd745a0f10e97588e i386/cdrecord-devel-2.01-0.a27.4.FC2.3.i386.rpm
e211f8168b2871d28284a2a51cedfe1a i386/mkisofs-2.01-0.a27.4.FC2.3.i386.rpm
4ad7958b1c95aa4ad4d2309fc6c24bf8 i386/cdda2wav-2.01-0.a27.4.FC2.3.i386.rpm
6279fef62c5fbfa11a8550cd0731f798 i386/debug/cdrtools-debuginfo-2.01-0.a27.4.FC2.3.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 6 months
[SECURITY] Fedora Core 1 Update: cdrtools-2.01-0.a19.2.FC1.1
by Harald Hoyer
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2004-297
2004-09-09
---------------------------------------------------------------------
Product : Fedora Core 1
Name : cdrtools
Version : 2.01
Release : 0.a19.2.FC1.1
Summary : A collection of CD/DVD utilities.
Description :
cdrtools is a collection of CD/DVD utilities.
---------------------------------------------------------------------
Update Information:
Anyone who has manually suid /usr/bin/cdrecord should update to this version.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0806
---------------------------------------------------------------------
* Wed Sep 08 2004 Harald Hoyer <harald(a)redhat.com> - 8:2.01-0.a19.2.FC1.1
- added patch for CAN-2004-0806, if s.o. is so stupid to make cdrecord suid
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/
8c5baaa4f091b16370a2fc6e92684246 SRPMS/cdrtools-2.01-0.a19.2.FC1.1.src.rpm
c3ce28f3c5b3190fd888db13f6a4de4c x86_64/cdrecord-2.01-0.a19.2.FC1.1.x86_64.rpm
32c300cf4f4bafd083782de090375c15 x86_64/cdrecord-devel-2.01-0.a19.2.FC1.1.x86_64.rpm
e6a285ccdeba93bd15488ebb8ea29690 x86_64/mkisofs-2.01-0.a19.2.FC1.1.x86_64.rpm
86dde7afac3d91514876e876cf96c4e2 x86_64/cdda2wav-2.01-0.a19.2.FC1.1.x86_64.rpm
c9cbb9577b4574f33357cb058eae6de4 x86_64/debug/cdrtools-debuginfo-2.01-0.a19.2.FC1.1.x86_64.rpm
02d85342deaca913ffb55b97bba42e10 i386/cdrecord-2.01-0.a19.2.FC1.1.i386.rpm
2c2ecccb5de0d111e1d23bc40d70cfdc i386/cdrecord-devel-2.01-0.a19.2.FC1.1.i386.rpm
969a9959cb2dac9295cb6a1fd6c48a49 i386/mkisofs-2.01-0.a19.2.FC1.1.i386.rpm
3df104a4966c5c075a8acbdc7248d362 i386/cdda2wav-2.01-0.a19.2.FC1.1.i386.rpm
1101f36dc1b269f940805eea77fd4da8 i386/debug/cdrtools-debuginfo-2.01-0.a19.2.FC1.1.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------
19 years, 6 months