Lucene search

K
centosCentOS ProjectCESA-2007:0019
HistoryJan 26, 2007 - 7:09 p.m.

gtk2 security update

2007-01-2619:09:14
CentOS Project
lists.centos.org
38

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

33.4%

CentOS Errata and Security Advisory CESA-2007:0019

The gtk2 package contains the GIMP ToolKit (GTK+), a library for creating
graphical user interfaces for the X Window System.

A bug was found in the way the gtk2 GdkPixbufLoader() function processed
invalid input. Applications linked against gtk2 could crash if they
loaded a malformed image file. (CVE-2007-0010)

Users of gtk2 are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-January/075643.html
https://lists.centos.org/pipermail/centos-announce/2007-January/075644.html
https://lists.centos.org/pipermail/centos-announce/2007-January/075645.html
https://lists.centos.org/pipermail/centos-announce/2007-January/075646.html

Affected packages:
gtk2
gtk2-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0019

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

33.4%