Security Advisory (MDKSA-2004:020): gdk-pixbuf

[aru]

MandrakeSoft Security Advisory MDKSA-2004:020 : gdk-pixbuf

 

March 10th, 2004

Updated gdk-pixbuf packages fix BMP-handling vulnerability

 

A vulnerability in gdk-pixbuf versions before 0.20 exists that could allow a malicious BMP file to crash the Evolution mail client. The updated packages have been patched to use gdk-pixbuf 0.22.0's BMP- handling code.

 

 

The released versions of Mandrake GNU/Linux affected are:

• Corporate Server 2.1
  

Full information about this advisory, including the updated packages, is available at:

www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:020

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2004-0111

 

Posted automatically by aru (mdksec2mub v0.0.8)