Fedora Linux 8524 Published by

A xloadimage security update is available for Fedora Core 2

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-236
2005-03-18
---------------------------------------------------------------------

Product : Fedora Core 2
Name : xloadimage
Version : 4.1
Release : 34.FC2
Summary : An X Window System based image viewer.
Description :
The xloadimage utility displays images in an X Window System window, loads images into the root window, or writes images into a file. Xloadimage supports many image types (including GIF, TIFF, JPEG, XPM, and XBM).



---------------------------------------------------------------------
Update Information:

This update fixes CAN-2005-0638, a problem in the parsing of shell metacharacters in filenames. It also fixes bugs in handling of malformed TIFF and PBM/PNM/PPM issues.
---------------------------------------------------------------------
* Fri Mar 18 2005 Bill Nottingham <notting@redhat.com>

- use system libjpeg
- fix quoting in filenames (CAN-2005-0638)

* Fri Jan 21 2005 Bill Nottingham <notting@redhat.com> 4.1-33

- fix bad use of format strings (#70867, #78481 <d.binderman@virgin.net>)

* Wed Oct 13 2004 Bill Nottingham <notting@redhat.com> 4.1-32

- add patch for slideshow (#114689)

* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>

- rebuilt


---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

2c177151565a8c1c109bc36769831c1a SRPMS/xloadimage-4.1-34.FC2.src.rpm
9d01327b4444c76a06cb1cc8560b5891 x86_64/xloadimage-4.1-34.FC2.x86_64.rpm
c3c25132097e69c71172e1d509dfa836 x86_64/debug/xloadimage-debuginfo-4.1-34.FC2.x86_64.rpm
ba9ab8fd596fefdf4284015b90c82d36 i386/xloadimage-4.1-34.FC2.i386.rpm
f35200f3233a2e9ea5bd560dc589ee29 i386/debug/xloadimage-debuginfo-4.1-34.FC2.i386.rpm

This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.