search.internet.com

Become a Marketplace Partner internet.commerce Be a Commerce Partner Linux Today Enterprise Linux Today Apache Today JustLinux.com Linux Planet PHPBuilder All Linux Devices Technology Jobs LinuxToday Newsletters Subscribe News Subscribe PR Subscribe Security internet.com IT Developer Internet News Small Business Personal Technology International Search internet.com Advertise Corporate Info Newsletters Tech Jobs E-mail Offers

Current Newswire: Linux And Martial Arts Humor - Linus Torvalds Vs. Chuck Norris Extending Nautilus, Scripting Your Way To UI Bliss Check Your Mysql Server Performance with MySQLTuner The Growth of the Newest Kubuntu Support Option Linux Game "System of Tomorrow" Ships in Two Weeks Anonymous Proxy Using Squid 3 On CentOS 5.x Install and Configure Cacti Monitoring Tool in Ubuntu 8.10 (Intrepid Ibex) Server SimplyMEPIS: The Best Desktop Linux You Haven't Tried Planning Extensions in TYPO3 How the Linux Kernel Manages Virtual Memory Sr. Developer, Backend Professional Technical Resources US-OR-Portland Post A Job | Post A Resume Conectiva Linux Advisory: gtk+ Oct 19, 2004, 15 :14 UTC (0 Talkback[s]) (1914 reads) CONECTIVA LINUX SECURITY ANNOUNCEMENT PACKAGE : gtk+ SUMMARY : Fixes for image loading vulnerabilities DATE : 2004-10-18 14:01:00 ID : CLA-2004:875 RELEVANT RELEASES : 9, 10 DESCRIPTION The gdk-pixbuf[1] library is a replacement for imlib with many improvements. A vulnerability found in the gdk-pixbuf bmp loader could allow a specially crafted BMP image to hang applications in an infinite loop (CAN-2004-0753[2]). Chris Evans[3] found a heap-based overflow and a stack-based overflow on gdk-pixbuf's xpm loader (CAN-2004-0782[4] and CAN-2004-0783[5]). He also discovered an integer overflow in the ico loader of gdk-pixbuf (CAN-2004-0788[6]). SOLUTION It is recommended that all gdk-pixbuf and/or gtk+2 users upgrade their packages. IMPORTANT: all applications linked against gdk-pixbuf or gtk+2 must be restarted after the upgrade in order to close the vulnerabilities. REFERENCES 1.http://developer.gnome.org/arch/imaging/gdkpixbuf.html 2.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0753 3.http://scary.beasts.org/security/CESA-2004-005.txt 4.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0782 5.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0783 6.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0788 UPDATED PACKAGES ftp://atualizacoes.conectiva.com.br/10/SRPMS/gdk-pixbuf-0.22.0-49324U10_2cl.src.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gdk-pixbuf-0.22.0-49324U10_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gdk-pixbuf-devel-0.22.0-49324U10_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gdk-pixbuf-devel-static-0.22.0-49324U10_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gdk-pixbuf-doc-0.22.0-49324U10_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/SRPMS/gtk+2-2.4.1-60034U10_1cl.src.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-devel-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-devel-static-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-doc-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-af-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-am-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-ar-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-az-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-be-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-bg-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-bn-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-br-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-ca-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-cs-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-cy-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-da-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-de-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-el-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-en_CA-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-en_GB-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-es-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-et-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-eu-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-fa-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-fi-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-fr-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-ga-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-gl-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-gu-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-he-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-hi-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-hr-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-hu-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-ia-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-id-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-is-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-it-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-ja-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-ko-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-li-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-lt-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-lv-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-mi-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-mk-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-ml-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-mn-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-mr-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-ms-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-ne-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-nl-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-nn-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-no-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-pa-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-pl-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-pt-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-pt_BR-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-ro-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-ru-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-sk-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-sl-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-sq-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-sr-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-sv-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-ta-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-th-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-tr-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-uk-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-uz-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-vi-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-wa-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-yi-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-zh_CN-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/10/RPMS/gtk+2-i18n-zh_TW-2.4.1-60034U10_1cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/SRPMS/gdk-pixbuf-0.22.0-22265U90_2cl.src.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/gdk-pixbuf-0.22.0-22265U90_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/gdk-pixbuf-devel-0.22.0-22265U90_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/gdk-pixbuf-devel-static-0.22.0-22265U90_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/gdk-pixbuf-doc-0.22.0-22265U90_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/SRPMS/gtk+2-2.2.1-25016U90_2cl.src.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/gtk+2-2.2.1-25016U90_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/gtk+2-devel-2.2.1-25016U90_2cl.i386.rpm ftp://atualizacoes.conectiva.com.br/9/RPMS/gtk+2-doc-2.2.1-25016U90_2cl.i386.rpm ADDITIONAL INSTRUCTIONS The apt tool can be used to perform RPM packages upgrades: run: apt-get update after that, execute: apt-get upgrade Detailed instructions regarding the use of apt and upgrade examples can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en All packages are signed with Conectiva's GPG key. The key and instructions on how to import it can be found at http://distro.conectiva.com.br/seguranca/chave/?idioma=en Instructions on how to check the signatures of the RPM packages can be found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en All our advisories and generic update instructions can be viewed at http://distro.conectiva.com.br/atualizacoes/?idioma=en Copyright (c) 2004 Conectiva Inc. http://www.conectiva.com No talkbacks posted.   Home | Search Talkbacks | Customize View    Top of Page   Enter your comments below: * Your Name: * Your Email Address: * Subject: CC: [will also send this talkback to an E-Mail address] * Comments: Tags allowed:<I>,<B> and <U>. See our talkback-policy for more about talkback content. Fields marked with * are required!

All times are recorded in UTC. Linux is a trademark of Linus Torvalds. Powered by Linux, Apache and PHP Search: Jupitermedia Corporation has two divisions: Jupiterimages and JupiterOnlineMedia Jupitermedia Corporate Info Legal Notices, Licensing, Reprints, Permissions, Privacy Policy. Advertise | Newsletters | Tech Jobs | Shopping | E-mail Offers Solutions Whitepapers and eBooks Microsoft PDF: Top 11 Reasons to Upgrade to Windows Server 2008 Intel Podcast Transcript: Talking vPro Avaya Article: Communication-Enabled Mashups: Empowering Both Business Owners and IT Whitepaper: Building a Real-World Model to Assess Virtualization Platforms PDF: Intel Centrino Duo Processor Technology with Intel Core2 Duo Processor Microsoft Article: Will Hyper-V Make VMware This Decade's Netscape? Go Parallel Article: Q&A with a TBB Junkie Microsoft Article: BitLocker Encryption on Windows Server 2008 Go Parallel Article: Intel Thread Checker, Meet 20 Million LOC IBM Whitepaper: Innovative Collaboration to Advance Your Business   Internet.com eBook: Real Life Rails IBM eBook: The Pros and Cons of Outsourcing Internet.com eBook: Best Practices for Developing a Web Site IBM CXO Whitepaper: The 2008 Global CEO Study "The Enterprise of the Future" Avaya Article: Call Control XML in Action - A CCXML Auto Attendant IBM CXO Whitepaper: Unlocking the DNA of the Adaptable Workforce--The Global Human Capital Study 2008 Adobe Acrobat Connect Pro: Web Conferencing and eLearning Whitepapers HP eBook: Storage Networking , Part 1 MORE WHITEPAPERS, EBOOKS, AND ARTICLES Webcasts Podcast: The Pro Platform - Intel vPro Technology Go Parallel Video: Intel(R) Threading Building Blocks: A New Method for Threading in C++ HP Video: Is Your Data Center Ready for a Real World Disaster? Microsoft Partner Portal Video: Microsoft Gold Certified Partners Build Successful Practices HP On Demand Webcast: Virtualization in Action Go Parallel Video: Performance and Threading Tools for Game Developers   Rackspace Hosting Center: Customer Videos Intel vPro Developer Virtual Bootcamp HP Disaster-Proof Solutions eSeminar HP On Demand Webcast: Discover the Benefits of Virtualization MORE WEBCASTS, PODCASTS, AND VIDEOS Downloads and eKits Amyuni Download: PDF & XPS Engine for Your .NET and ActiveX Applications Acresso Download: Try InstallShield 2009 Microsoft Download: Silverlight 2 SDK 30-Day Trial: SPAMfighter Exchange Module   Red Gate Download: SQL Toolbelt Iron Speed Designer Application Generator Microsoft Download: Silverlight 2 Developer Runtime (Windows) MORE DOWNLOADS, EKITS, AND FREE TRIALS Tutorials and Demos Demo: Dual-Core Intel Itanium 2 Processor IBM IT Innovation Article: Green Servers Provide a Competitive Advantage   Microsoft Article: Making Designer/Developer Collaboration a Reality MORE TUTORIALS, DEMOS AND STEP-BY-STEP GUIDES