| [Security Announce] [ MDVSA-2008:077 ] - Updated perl-Tk packages fix GIF processing vulnerability |
|
|
|
| Écrit par Administrator |
| Jeudi, 27 Mars 2008 08:46 |
|
 _______________________________________________________________________   Mandriva Linux Security Advisory                        MDVSA-2008:077  http://www.mandriva.com/security/  _______________________________________________________________________   Package : perl-Tk  Date   : March 26, 2008  Affected: 2007.0, 2007.1, 2008.0, Corporate 3.0, Corporate 4.0  _______________________________________________________________________   Problem Description:   A vulnerability in perl-Tk was found where specially crafted GIF images could crash perl-Tk (an identical issue to that found in php-gd, gd, and SDL_image).   The updated packages have been patched to correct this issue.  _______________________________________________________________________  References:   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4484  _______________________________________________________________________ Updated Packages:   Mandriva Linux 2007.0:  617890813c4fbde09881f93318d8fb0c 2007.0/i586/perl-Tk-804.027-7.1mdv2007.0.i586.rpm  e9a52dbb6ae3c66329e8804db7540255 2007.0/i586/perl-Tk-devel-804.027-7.1mdv2007.0.i586.rpm  62ec6966a6e1b75a32cc69ba429383d9 2007.0/i586/perl-Tk-doc-804.027-7.1mdv2007.0.i586.rpm  35c904dd5d8fdfcb1289cff6f5683ffd 2007.0/SRPMS/perl-Tk-804.027-7.1mdv2007.0.src.rpm  Mandriva Linux 2007.0/X86_64:  1c90b8668b367864a7a745e7c5fe7a3e 2007.0/x86_64/perl-Tk-804.027-7.1mdv2007.0.x86_64.rpm  94e06f5c06bdaaca2387d78f883bd42b 2007.0/x86_64/perl-Tk-devel-804.027-7.1mdv2007.0.x86_64.rpm  c716b24bd69c972f60d8a77a297571fb 2007.0/x86_64/perl-Tk-doc-804.027-7.1mdv2007.0.x86_64.rpm  35c904dd5d8fdfcb1289cff6f5683ffd 2007.0/SRPMS/perl-Tk-804.027-7.1mdv2007.0.src.rpm  Mandriva Linux 2007.1:  ccd8c93b6638f18f44956e3a7976843f 2007.1/i586/perl-Tk-804.027-7.1mdv2007.1.i586.rpm  6f36c284047f89d996039a4890ef24a5 2007.1/i586/perl-Tk-devel-804.027-7.1mdv2007.1.i586.rpm  ea68a42b822f65622c08401438e18f3a 2007.1/i586/perl-Tk-doc-804.027-7.1mdv2007.1.i586.rpm  ba77b6b3ba20990bb584112edd8a8a11 2007.1/SRPMS/perl-Tk-804.027-7.1mdv2007.1.src.rpm  Mandriva Linux 2007.1/X86_64:  64c30b9a6521ee330c3ab503c7af4a81 2007.1/x86_64/perl-Tk-804.027-7.1mdv2007.1.x86_64.rpm  3af0d32f148366759bc38b6ebe9d0ed2 2007.1/x86_64/perl-Tk-devel-804.027-7.1mdv2007.1.x86_64.rpm  a7deec6b34f5ae1b4a2415f184fce3f6 2007.1/x86_64/perl-Tk-doc-804.027-7.1mdv2007.1.x86_64.rpm  ba77b6b3ba20990bb584112edd8a8a11 2007.1/SRPMS/perl-Tk-804.027-7.1mdv2007.1.src.rpm  Mandriva Linux 2008.0:  c0640864a0032ccb32e154b1eeb31e46 2008.0/i586/perl-Tk-804.027-7.1mdv2008.0.i586.rpm  cc4587989566c6cc9834aa766a97de70 2008.0/i586/perl-Tk-devel-804.027-7.1mdv2008.0.i586.rpm  bbff9b65728eb4be47ffd4fdde627364 2008.0/i586/perl-Tk-doc-804.027-7.1mdv2008.0.i586.rpm  08a52245b151a07de2f1ff578f5b94d4 2008.0/SRPMS/perl-Tk-804.027-7.1mdv2008.0.src.rpm  Mandriva Linux 2008.0/X86_64:  4784cc19583484e691657d027557e273 2008.0/x86_64/perl-Tk-804.027-7.1mdv2008.0.x86_64.rpm  e2cb98338952dbcf381ac41755c5bbcf 2008.0/x86_64/perl-Tk-devel-804.027-7.1mdv2008.0.x86_64.rpm  8f5e35f7f7ddffe3a0bc557fc7124f97 2008.0/x86_64/perl-Tk-doc-804.027-7.1mdv2008.0.x86_64.rpm  08a52245b151a07de2f1ff578f5b94d4 2008.0/SRPMS/perl-Tk-804.027-7.1mdv2008.0.src.rpm  Corporate 3.0:  664977154c6d3a6cf097535e4e4cffb6 corporate/3.0/i586/perl-Tk-800.024-4.1.C30mdk.i586.rpm  7ac67c7e4768fda4bc24f64f46de052f corporate/3.0/i586/perl-Tk-devel-800.024-4.1.C30mdk.i586.rpm  86a465731211ca4f8b5eb06736580f7a corporate/3.0/i586/perl-Tk-doc-800.024-4.1.C30mdk.i586.rpm  efeb7e3c708c1891dca5291e89a90ffb corporate/3.0/SRPMS/perl-Tk-800.024-4.1.C30mdk.src.rpm  Corporate 3.0/X86_64:  e273a52a8ce4b4df938f6f1a332c5a9a corporate/3.0/x86_64/perl-Tk-800.024-4.1.C30mdk.x86_64.rpm  c626b81ebcca6319a493da41daa64c59 corporate/3.0/x86_64/perl-Tk-devel-800.024-4.1.C30mdk.x86_64.rpm  59ba63dec80a1409340053b8d036c16a corporate/3.0/x86_64/perl-Tk-doc-800.024-4.1.C30mdk.x86_64.rpm  efeb7e3c708c1891dca5291e89a90ffb corporate/3.0/SRPMS/perl-Tk-800.024-4.1.C30mdk.src.rpm  Corporate 4.0:  40a305aea1ccccac122eeaa29623fc9d corporate/4.0/i586/perl-Tk-804.027-4.1.20060mlcs4.i586.rpm  500f724e392a66d8b77883ef45bb0d27 corporate/4.0/i586/perl-Tk-devel-804.027-4.1.20060mlcs4.i586.rpm  c37c8e2110050388d91fb82f23bc365a corporate/4.0/i586/perl-Tk-doc-804.027-4.1.20060mlcs4.i586.rpm  57e6e403c1e65b45c85ea086a3dcf861 corporate/4.0/SRPMS/perl-Tk-804.027-4.1.20060mlcs4.src.rpm  Corporate 4.0/X86_64:  33856879c459ad1b8d105860d6a93bdf corporate/4.0/x86_64/perl-Tk-804.027-4.1.20060mlcs4.x86_64.rpm  cd1461f7f031beea459abbcecfd74780 corporate/4.0/x86_64/perl-Tk-devel-804.027-4.1.20060mlcs4.x86_64.rpm  fa087aea0cf09672dd2a25e57461ab15 corporate/4.0/x86_64/perl-Tk-doc-804.027-4.1.20060mlcs4.x86_64.rpm  57e6e403c1e65b45c85ea086a3dcf861 corporate/4.0/SRPMS/perl-Tk-804.027-4.1.20060mlcs4.src.rpm  _______________________________________________________________________  To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.  All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing:  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98  You can view other update advisories for Mandriva Linux at:  http://www.mandriva.com/security/advisories  If you want to report vulnerabilities, please contact  security_(at)_mandriva.com  _______________________________________________________________________ |



























































