Linux Compatible
  • News
    • Channels
    • Archive
    • Search
    • Submit
  • Articles
    • Categories
  • Knowledgebase
  • Compatibility
    • Search
  • Links
  • Forums
  • Twitter
Advertisement

Latest News
[ Windows | Linux | Apple ]

· Libreoffice 4.0.3 released and PPA installation instructions included
· MySQL 5.5.31 for Debian Squeeze
· Gigabyte Intel Z87 Motherboard Lineup Preview and more
· Microsoft to roll out Xbox dashboard UI alterations before next-gen console
· Adobe Photoshop Express now available for Windows 8 and RT
· GNOME 3.8.2 Released
· Windows 8 is an enterprise 'non-starter' because IT sees no value in changes
· What to Expect from Unity in Ubuntu 13.10
· Analysts praise Nokia's new Lumia 925
· Best Business Laptops - May 2013 and more

Upcoming News
· [Tech ARP] BIOS Option Of The Week - ISA Shared Memory
· What To Expect From The Next iPhone @ ThinkComputers.org
· Mad Catz R.A.T.M Wireless Mobile Gaming Mouse
· Sumo Lounge Emperor
· Gigabyte Intel Z87 Motherboard Lineup Preview
· [ANNOUNCE] libchamplain 0.12.4
· [security-announce] SUSE-SU-2013:0810-1: important: Security update for oracle-update
· [security-announce] SUSE-SU-2013:0811-1: important: Security update for oracle-update
· [security-announce] SUSE-SU-2013:0809-1: important: Security update for Acrobat Reader
· Rosewill RDEE-12002 USB 3.0 Hard Drive Enclosure @ techPowerUp

Linux Compatibility
· Dell Dimension 9100
· CL-CAM50001 UPC=3700284609322
· DFE 520 TX
· nVidia GeForce4 MX 440
· Gore: Ultimate Soldier
· SMC2802W V2 wi-fi 54Mbps PCI card
· Wireless modem router N300
· Dell P780
· ASUS A7V8X
· BricsCAD for Linux

New Forum Topics
· shutdown link ?
by: estirwent
on: 2013-05-11 17:46
18 replies, 6334 views

· Laptop keyboard drank soda
by: Zenn
on: 2013-04-30 00:27
1 replies, 641 views

· connecting to to internet with ubuntu
by: Zenn
on: 2013-04-30 00:26
2 replies, 4498 views

· Need Linux-compatible PS/2 expansion card
by: Zenn
on: 2013-04-30 00:26
1 replies, 705 views

· irql_not_less_or_equal blue screen
by: Zenn
on: 2013-04-30 00:25
2 replies, 1095 views

News Channels
· Drivers
· Guides
· Reviews
· Security
· Software
· Press Release
· Updates
· Interviews
· Linux
· General
· Debian
· Red Hat
· Slackware
· Gentoo
· Mandriva
· White Box
· SUSE
· GNOME
· KDE
· CentOS
· Ubuntu
· MEPIS
· Android

What's New
Login to see an overview of all news stories since your last visit.

Welcome to our website

To take full advantage of all features you need to login or register. Registration is completely free and takes only a few seconds.

Linux Compatible » News » March 2008 » USN-595-1: SDL_image vulnerabilities

USN-595-1: SDL_image vulnerabilities

Posted by Bob on: 03/26/2008 11:35 PM [ Print | 0 comment(s) ]

A new SDL_image vulnerabilities update is available for Ubuntu Linux. Here the announcement:




Ubuntu Security Notice USN-595-1 March 26, 2008
sdl-image1.2 vulnerabilities
CVE-2007-6697, CVE-2008-0544
==========================
==========================
=========

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 6.10
Ubuntu 7.04
Ubuntu 7.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
libsdl-image1.2 1.2.4-1ubuntu0.1

Ubuntu 6.10:
libsdl-image1.2 1.2.5-2ubuntu0.6.10.1

Ubuntu 7.04:
libsdl-image1.2 1.2.5-2ubuntu0.7.04.1

Ubuntu 7.10:
libsdl-image1.2 1.2.5-3ubuntu0.1

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

Michael Skladnikiewicz discovered that SDL_image did not correctly load
GIF images. If a user or automated system were tricked into processing
a specially crafted GIF, a remote attacker could execute arbitrary code
or cause a crash, leading to a denial of service. (CVE-2007-6697)

David Raulo discovered that SDL_image did not correctly load ILBM images.
If a user or automated system were tricked into processing a specially
crafted ILBM, a remote attacker could execute arbitrary code or cause
a crash, leading to a denial of service. (CVE-2008-0544)


Updated packages for Ubuntu 6.06 LTS:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2=
_1.2.4-1ubuntu0.1.diff.gz
Size/MD5: 27731 f25861d21b3b2222ff604b849c3842fb
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2=
_1.2.4-1ubuntu0.1.dsc
Size/MD5: 703 4a7bab926b499874e626476a24d59192
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2=
_1.2.4.orig.tar.gz
Size/MD5: 841885 70bf617f99e51a2c94550fc79d542f0b

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.4-1ubuntu0.1_amd64.deb
Size/MD5: 34740 ab68facb50821f78f5d4511bce334a51
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.4-1ubuntu0.1_amd64.deb
Size/MD5: 28972 1e1a9448740510f93fe01bd88d46b502

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.4-1ubuntu0.1_i386.deb
Size/MD5: 31012 e838fe7522ad48cdfc95bfdc73de320f
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.4-1ubuntu0.1_i386.deb
Size/MD5: 26768 93e3957bb91a6268bb1030155f955f4d

powerpc architecture (Apple Macintosh G3/G4/G5):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.4-1ubuntu0.1_powerpc.deb
Size/MD5: 35198 117d57af8e4ce8e55315dcfd9749ebf3
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.4-1ubuntu0.1_powerpc.deb
Size/MD5: 29798 60d44fc21e806b31c03760aebcf14b64

sparc architecture (Sun SPARC/UltraSPARC):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.4-1ubuntu0.1_sparc.deb
Size/MD5: 32956 fede4369525cfe7e1b0f03c95a700ba7
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.4-1ubuntu0.1_sparc.deb
Size/MD5: 27422 7adb8093da72732c65ce0dc0bb76d932

Updated packages for Ubuntu 6.10:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2=
_1.2.5-2ubuntu0.6.10.1.diff.gz
Size/MD5: 12438 722a44ed315b6bd0761bd4b55491b4c2
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2=
_1.2.5-2ubuntu0.6.10.1.dsc
Size/MD5: 715 ed059f756a27f70abad413f43813dfe6
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2=
_1.2.5.orig.tar.gz
Size/MD5: 1308637 cd006109a73bf7dcc93e1c3ed15ee782

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.5-2ubuntu0.6.10.1_amd64.deb
Size/MD5: 38162 e70127ca5a699f4ae80d25f4393eb2b1
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.5-2ubuntu0.6.10.1_amd64.deb
Size/MD5: 31304 9d1e30e1dbc8a47d50347fec9e2ae308

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.5-2ubuntu0.6.10.1_i386.deb
Size/MD5: 34772 25d73b30f2fad8dbb592446b623d10d4
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.5-2ubuntu0.6.10.1_i386.deb
Size/MD5: 29518 b0a4357caad50210e006d5714e9ba4ce

powerpc architecture (Apple Macintosh G3/G4/G5):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.5-2ubuntu0.6.10.1_powerpc.deb
Size/MD5: 39348 b68e0281277b12ee0b60ac03a9793d9f
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.5-2ubuntu0.6.10.1_powerpc.deb
Size/MD5: 32732 d0d78d804a532f8fdef5458317871f9f

sparc architecture (Sun SPARC/UltraSPARC):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.5-2ubuntu0.6.10.1_sparc.deb
Size/MD5: 36452 1fe5217484b152f2fe564e82ebbbc94b
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.5-2ubuntu0.6.10.1_sparc.deb
Size/MD5: 29856 bcad33139b674dd652af6fcc48c607a8

Updated packages for Ubuntu 7.04:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2=
_1.2.5-2ubuntu0.7.04.1.diff.gz
Size/MD5: 12496 b7fab5d4c24566e0b6687c4f1965d356
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2=
_1.2.5-2ubuntu0.7.04.1.dsc
Size/MD5: 799 1164a9560c489027b5f7c35c0ff88940
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2=
_1.2.5.orig.tar.gz
Size/MD5: 1308637 cd006109a73bf7dcc93e1c3ed15ee782

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.5-2ubuntu0.7.04.1_amd64.deb
Size/MD5: 38086 3865a5c45b1f93f85093d497605978da
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.5-2ubuntu0.7.04.1_amd64.deb
Size/MD5: 31678 6ffdff8cd099fa61bbd642010855470b

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.5-2ubuntu0.7.04.1_i386.deb
Size/MD5: 34636 1101c9993d3bd36dce2b30d49c13e735
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.5-2ubuntu0.7.04.1_i386.deb
Size/MD5: 29846 e45ba5dbe02a80dabfe2bfe9a14eb0de

powerpc architecture (Apple Macintosh G3/G4/G5):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.5-2ubuntu0.7.04.1_powerpc.deb
Size/MD5: 39218 3a9de5d81673a486dcd67422b04cba3d
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.5-2ubuntu0.7.04.1_powerpc.deb
Size/MD5: 34488 a99d88e2c4f4be1bf9b54a4408b6da9f

sparc architecture (Sun SPARC/UltraSPARC):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.5-2ubuntu0.7.04.1_sparc.deb
Size/MD5: 36304 7800adda592b293e5b3bddba909765d1
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.5-2ubuntu0.7.04.1_sparc.deb
Size/MD5: 30212 94bffe0f402269e7d697c5c2a42ab8ec

Updated packages for Ubuntu 7.10:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2=
_1.2.5-3ubuntu0.1.diff.gz
Size/MD5: 27013 918b44bd4851bc05e539d0b4462da7aa
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2=
_1.2.5-3ubuntu0.1.dsc
Size/MD5: 789 e8c98a5eba6615818895b7c7df91e294
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/sdl-image1.2=
_1.2.5.orig.tar.gz
Size/MD5: 1308637 cd006109a73bf7dcc93e1c3ed15ee782

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.5-3ubuntu0.1_amd64.deb
Size/MD5: 38238 d972ea754a2ad5267e861fbfbc685ffb
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.5-3ubuntu0.1_amd64.deb
Size/MD5: 31760 cf98987b70c07bf213d872db9de38d48

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.5-3ubuntu0.1_i386.deb
Size/MD5: 34732 6302e8d01dbdb7abcbf73c3b29da4260
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.5-3ubuntu0.1_i386.deb
Size/MD5: 29892 c9dab7a7643a65e78b2abfe56074679e

powerpc architecture (Apple Macintosh G3/G4/G5):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.5-3ubuntu0.1_powerpc.deb
Size/MD5: 39326 79e6eca19a9b299fa6889125705371e7
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.5-3ubuntu0.1_powerpc.deb
Size/MD5: 34546 9c67ead459d5ac24e3851e7aca6f1771

sparc architecture (Sun SPARC/UltraSPARC):

http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2-dev_1.2.5-3ubuntu0.1_sparc.deb
Size/MD5: 36364 5dc30616c96abfaf72bf409bca419f83
http://security.ubuntu.com/ubuntu/pool/main/s/sdl-image1.2/libsdl-image=
1.2_1.2.5-3ubuntu0.1_sparc.deb
Size/MD5: 30324 a04f1db06575cd845bab268ce7231264


--Pk6IbRAofICFmK5e
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFH6sqeH/9LqRcGPm0RAlOxAJsEMHhNfKsuS5zdBdNKJmYzGkNLKACdFIYd
zPiP/iwifQGdfLEXU90hHzc=
=UEVy
-----END PGP SIGNATURE-----


Bookmark and Share

« USN-594-1: libnet-dns-perl vulnerability · Miro 1.2.1 »

Linux Compatible » News » March 2008 » USN-595-1: SDL_image vulnerabilities
All products mentioned are registered trademarks or trademarks of their respective owners.
© 2002-2013 Esselbach Internet Solutions - All Rights Reserved. Terms and privacy policy
Powered by Contentteller® Business Edition