Security advisory: gtk2-x11

Yaakov S (Cygwin Ports) yselkowitz@users.sourceforge.net
Wed Nov 16 20:46:00 GMT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gerrit,

The GdkPixbuf library, that is also included in GTK+ 2, contains
vulnerabilities that could lead to a Denial of Service or the execution
of arbitrary code.

Solution: a patch for gtk+-2.x is required (URL below).

(BTW, Gerrit, what are your plans for GTK/GNOME?  I'm willing to take
stuff over if you've lost interest.)

http://www.gentoo.org/security/en/glsa/glsa-200511-14.xml
http://www.idefense.com/application/poi/display?id=339&type=vulnerabilities
http://www.gentoo.org/cgi-bin/viewcvs.cgi/x11-libs/gtk+/files/gtk+-2-xpm_loader.patch?hideattic=1

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Cygwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDe5qZpiWmPGlmQSMRAgRdAJ9Fh1oRf52xEELoi0gfshs9dKXBIwCfaGGU
Ce7YghJ4hRm8rCB07c3SdgI=
=KMcX
-----END PGP SIGNATURE-----



More information about the Cygwin-apps mailing list