Nom du paquet
imlib2
Date
2008-06-25
Advisory ID
MDVSA-2008:123
Affected versions
CS4.0 i586 , CS4.0 x86_64 , 2008.0 i586 , 2007.1 i586 , CS3.0 x86_64 , 2008.0 x86_64 , CS3.0 i586 , 2008.1 x86_64 , 2008.1 i586 , 2007.1 x86_64

Problem description

Stefan Cornelius discovered two buffer overflows in Imlib's image
loaders for PNM and XPM images, which could possibly result in the
execution of arbitrary code (CVE-2008-2426).

The updated packages have been patched to prevent this issue.

Updated packages

CS4.0 i586

 71d4dd6004a7a8fdd021c9ee3e12833e  corporate/4.0/i586/imlib2-data-1.2.1-1.4.20060mlcs4.i586.rpm
 64ea155ea7d232ec0cd4ca0312d46d6b  corporate/4.0/i586/libimlib2_1-1.2.1-1.4.20060mlcs4.i586.rpm
 d32d8308dc1e1c255b3a0760347fb309  corporate/4.0/i586/libimlib2_1-devel-1.2.1-1.4.20060mlcs4.i586.rpm
 68d0ad2024383f05cc1609fbba6fd2ad  corporate/4.0/i586/libimlib2_1-filters-1.2.1-1.4.20060mlcs4.i586.rpm
 232ee295638c7403f493c39b5ce4813e  corporate/4.0/i586/libimlib2_1-loaders-1.2.1-1.4.20060mlcs4.i586.rpm 
 dba76014532c7a9b1c8ba646324263ae  corporate/4.0/SRPMS/imlib2-1.2.1-1.4.20060mlcs4.src.rpm

CS4.0 x86_64

 0e36868fe671a6e97ed37b7e272abe06  corporate/4.0/x86_64/imlib2-data-1.2.1-1.4.20060mlcs4.x86_64.rpm
 5037005d5d71e60e75d283cef7c8704e  corporate/4.0/x86_64/lib64imlib2_1-1.2.1-1.4.20060mlcs4.x86_64.rpm
 c822cf77f4cca4e4edd602d25db126ea  corporate/4.0/x86_64/lib64imlib2_1-devel-1.2.1-1.4.20060mlcs4.x86_64.rpm
 a448734f54c6e97f287a441a711aa8f3  corporate/4.0/x86_64/lib64imlib2_1-filters-1.2.1-1.4.20060mlcs4.x86_64.rpm
 74d9ee28fc94bbc2d44162fc1d4efe33  corporate/4.0/x86_64/lib64imlib2_1-loaders-1.2.1-1.4.20060mlcs4.x86_64.rpm 
 dba76014532c7a9b1c8ba646324263ae  corporate/4.0/SRPMS/imlib2-1.2.1-1.4.20060mlcs4.src.rpm

2008.0 i586

 1214ee42f4076fec8704794bc767916e  2008.0/i586/imlib2-data-1.4.0.003-2.1mdv2008.0.i586.rpm
 eb5319b2c8cb33a204332822e6349201  2008.0/i586/libimlib2_1-1.4.0.003-2.1mdv2008.0.i586.rpm
 ea8dbec91f1a8299550f2ff4acb17980  2008.0/i586/libimlib2_1-filters-1.4.0.003-2.1mdv2008.0.i586.rpm
 6362adf88ef3e4179f9a31b9acb20dcb  2008.0/i586/libimlib2_1-loaders-1.4.0.003-2.1mdv2008.0.i586.rpm
 116ac3cb141512cc78adb8a1f4c37ecb  2008.0/i586/libimlib2-devel-1.4.0.003-2.1mdv2008.0.i586.rpm 
 42f76cee20ca495e92f7ba5ca98408e8  2008.0/SRPMS/imlib2-1.4.0.003-2.1mdv2008.0.src.rpm

2007.1 i586

 1ecafd85391001ebb4d30209552309ba  2007.1/i586/imlib2-data-1.2.2-3.2mdv2007.1.i586.rpm
 3737a0a9fd33471a724f6f8902dd9726  2007.1/i586/libimlib2_1-1.2.2-3.2mdv2007.1.i586.rpm
 bdca73870489834a7237723734c2cfe9  2007.1/i586/libimlib2_1-devel-1.2.2-3.2mdv2007.1.i586.rpm
 09a10fa2bfac9b0a4bc544e4b4a5c2c0  2007.1/i586/libimlib2_1-filters-1.2.2-3.2mdv2007.1.i586.rpm
 cf47069a5a66673ab43d96ca45fe00a7  2007.1/i586/libimlib2_1-loaders-1.2.2-3.2mdv2007.1.i586.rpm 
 75afe69b0e922d72122bd3a4498bfe8f  2007.1/SRPMS/imlib2-1.2.2-3.2mdv2007.1.src.rpm

CS3.0 x86_64

 1f3bd632cf8d35c6d39b246f1249579a  corporate/3.0/x86_64/lib64imlib2_1-1.0.6-4.5.C30mdk.x86_64.rpm
 2a9b0f77a8b889e06f779274e0008fc8  corporate/3.0/x86_64/lib64imlib2_1-devel-1.0.6-4.5.C30mdk.x86_64.rpm
 f7dbc8a2aa66932553ce5766f8bd7566  corporate/3.0/x86_64/lib64imlib2_1-filters-1.0.6-4.5.C30mdk.x86_64.rpm
 0fc7214ac8520db812f4fb3c7feb844e  corporate/3.0/x86_64/lib64imlib2_1-loaders-1.0.6-4.5.C30mdk.x86_64.rpm 
 b494bd83d273dd46d71eca324bca5416  corporate/3.0/SRPMS/imlib2-1.0.6-4.5.C30mdk.src.rpm

2008.0 x86_64

 f3ec35cf049082651ef9f4db223e830b  2008.0/x86_64/imlib2-data-1.4.0.003-2.1mdv2008.0.x86_64.rpm
 dccec6f91c995c5ac32c0c6de00b2acc  2008.0/x86_64/lib64imlib2_1-1.4.0.003-2.1mdv2008.0.x86_64.rpm
 7fb7d920e314dcbfba83d0205c58e5a7  2008.0/x86_64/lib64imlib2_1-filters-1.4.0.003-2.1mdv2008.0.x86_64.rpm
 4285b0a221052eabb0287873c615e6bc  2008.0/x86_64/lib64imlib2_1-loaders-1.4.0.003-2.1mdv2008.0.x86_64.rpm
 5b3650f57fc915e344cb53366c865de6  2008.0/x86_64/lib64imlib2-devel-1.4.0.003-2.1mdv2008.0.x86_64.rpm 
 42f76cee20ca495e92f7ba5ca98408e8  2008.0/SRPMS/imlib2-1.4.0.003-2.1mdv2008.0.src.rpm

CS3.0 i586

 22503a39dda4bfffe3c65232e7d87c93  corporate/3.0/i586/libimlib2_1-1.0.6-4.5.C30mdk.i586.rpm
 a03ce61ccf1c8c5070a168c5349b358c  corporate/3.0/i586/libimlib2_1-devel-1.0.6-4.5.C30mdk.i586.rpm
 58d70546c96b5a46ac8ca01f1ff3384e  corporate/3.0/i586/libimlib2_1-filters-1.0.6-4.5.C30mdk.i586.rpm
 42916631379dd652af28865ac46d03b6  corporate/3.0/i586/libimlib2_1-loaders-1.0.6-4.5.C30mdk.i586.rpm 
 b494bd83d273dd46d71eca324bca5416  corporate/3.0/SRPMS/imlib2-1.0.6-4.5.C30mdk.src.rpm

2008.1 x86_64

 f3dd712617045232ceecaa82a3177352  2008.1/x86_64/imlib2-data-1.4.0.003-4.1mdv2008.1.x86_64.rpm
 b06834c0f22ccfc256681a48a93033a3  2008.1/x86_64/lib64imlib2_1-1.4.0.003-4.1mdv2008.1.x86_64.rpm
 5ea2f28aab852d9f62693dcc5e8ecdd4  2008.1/x86_64/lib64imlib2_1-filters-1.4.0.003-4.1mdv2008.1.x86_64.rpm
 b6e8fba14f5b8da8d54c167f5ea25da7  2008.1/x86_64/lib64imlib2_1-loaders-1.4.0.003-4.1mdv2008.1.x86_64.rpm
 b04ebb76f8efac0d2a02f49d34443918  2008.1/x86_64/lib64imlib2-devel-1.4.0.003-4.1mdv2008.1.x86_64.rpm 
 8c34ee1b5d7ba25a4e38991212628a73  2008.1/SRPMS/imlib2-1.4.0.003-4.1mdv2008.1.src.rpm

2008.1 i586

 61630dec23098687773aa4fdec0da7de  2008.1/i586/imlib2-data-1.4.0.003-4.1mdv2008.1.i586.rpm
 31eca31bf55a696bda613046687bb3c2  2008.1/i586/libimlib2_1-1.4.0.003-4.1mdv2008.1.i586.rpm
 7292f56c20d9413cfd826e3f7d4ed04b  2008.1/i586/libimlib2_1-filters-1.4.0.003-4.1mdv2008.1.i586.rpm
 5fce6ab5d5dca0077c0a86b3a3d73c33  2008.1/i586/libimlib2_1-loaders-1.4.0.003-4.1mdv2008.1.i586.rpm
 85bda71fab55a242d68336f4267e0188  2008.1/i586/libimlib2-devel-1.4.0.003-4.1mdv2008.1.i586.rpm 
 8c34ee1b5d7ba25a4e38991212628a73  2008.1/SRPMS/imlib2-1.4.0.003-4.1mdv2008.1.src.rpm

2007.1 x86_64

 a849312fa506167d86addce88916b87a  2007.1/x86_64/imlib2-data-1.2.2-3.2mdv2007.1.x86_64.rpm
 f479fa3a9822eda1ee711c64e4371295  2007.1/x86_64/lib64imlib2_1-1.2.2-3.2mdv2007.1.x86_64.rpm
 8608807fe46db99a5812bc06e893e334  2007.1/x86_64/lib64imlib2_1-devel-1.2.2-3.2mdv2007.1.x86_64.rpm
 188de9396d778da58af40db064d85589  2007.1/x86_64/lib64imlib2_1-filters-1.2.2-3.2mdv2007.1.x86_64.rpm
 2e60dccd71bbd149859beaa786234616  2007.1/x86_64/lib64imlib2_1-loaders-1.2.2-3.2mdv2007.1.x86_64.rpm 
 75afe69b0e922d72122bd3a4498bfe8f  2007.1/SRPMS/imlib2-1.2.2-3.2mdv2007.1.src.rpm

References