pilla Bodhisattva
Joined: 07 Aug 2002 Posts: 7729 Location: Underworld
|
Posted: Fri Jul 11, 2003 5:57 pm Post subject: [gentoo-security] GLSA: gtksee (200307-05) |
|
|
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- - - ---------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200307-05
- - - ---------------------------------------------------------------------
PACKAGE : gtksee
SUMMARY : buffer overflow
DATE : 2003-07-11 14:44 UTC
EXPLOIT : local
VERSIONS AFFECTED : <gtksee-0.5.2
FIXED VERSION : >=gtksee-0.5.2
CVE : CAN-2003-0444
- - - ---------------------------------------------------------------------
Attackers can use carefully crafted png pictures to execute arbitrary
commands using a buffer overflow in when viewed in gtksee.
SOLUTION
It is recommended that all Gentoo Linux users who are running
media-gfx/gtksee upgrade to gtksee-0.5.2 as follows
emerge sync
emerge gtksee
emerge clean
- - - ---------------------------------------------------------------------
aliz@gentoo.org - GnuPG key is available at http://dev.gentoo.org/~aliz
- - - ---------------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
iD8DBQE/Ds1MfT7nyhUpoZMRAk6PAJ4xSgxRQP2qxFtVcn/8rVTeeRV9PACguNFC
M+y/tKsm3IkmfB9YZqwETYA=
=bIk6
-----END PGP SIGNATURE----- _________________ "I'm just very selective about the reality I choose to accept." -- Calvin |
|