SUSE Security Announcement: gtk2, gdk-pixbuf (SUSE-SA:2004:033)
-----BEGIN PGP SIGNED MESSAGE-----
______________________________________________________________________________
SUSE Security Announcement
Package: gtk2, gdk-pixbuf
Announcement-ID: SUSE-SA:2004:033
Date: Wednesday, Sep 17th 2004 12:00 MEST
Affected products: 8.1, 8.2, 9.0, 9.1
SUSE Linux Enterprise Server 8, 9
SuSE Linux Desktop 1.0
Vulnerability Type: remote code execution
Severity (1-10): 9
SUSE default package: yes
Cross References: CAN-2004-0782
CAN-2004-0783
CAN-2004-0788
Content of this advisory:
1) security vulnerability resolved:
- heap based overflow
- stack based overflow
- integer overflow
2) solution/workaround
3) special instructions and notes
4) package location and checksums
5) pending vulnerabilities, solutions, workarounds:
- mozilla
- mc
- squid
- gaim
- nessus
6) standard appendix (further information)
______________________________________________________________________________
1) problem description, brief discussion
gdk-pixbuf is an image loading and rendering library mostly used
by GTK and GNOME applications. It is distributed as a separate
package for gtk1 and integrated into the gtk2 package. Chris
Evans has discovered a heap based, a stack based and an integer
overflow in the XPM and ICO loaders of those libraries. The
overflows can be exploited by tricking an application to display
a malformed image to make it crash or to execute code.
2) solution/workaround
There is no known workaround, please install the update
packages.
3) special instructions and notes
After the update packages have been installed, all applications
linked against gdk-pixbuf libraries must be restarted.
4) package location and checksums
Please download the update package for your distribution and verify its
integrity by the methods listed in section 3) of this announcement.
Then, install the package using the command "rpm -Fhv file.rpm" to apply
the update.
Our maintenance customers are being notified individually. The packages
are being offered to install from the maintenance web.
x86 Platform:
SUSE Linux 9.1:
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/gtk2-2.2.4-125.4.i586.rpm
6bef703af85fcded2c953e508e0fffea
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/gdk-pixbuf-0.22.0-62.7.i586.rpm
73949b52a855b2a53eb7c0abdb5a9823
patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/gtk2-2.2.4-125.4.i586.patch.rpm
7326343f2db2f859a22c1c52c4b4e0ef
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/gdk-pixbuf-0.22.0-62.7.i586.patch.rpm
a2b2cfe3f04cf45147c27a821df77f63
source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/src/gtk2-2.2.4-125.4.src.rpm
b82cc25deca74c04d074f4f1bd137349
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/src/gdk-pixbuf-0.22.0-62.7.src.rpm
7dfece40e4e1ef17da8ef4a97cc57fa7
SUSE Linux 9.0:
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/gtk2-2.2.3-54.i586.rpm
ccfef6e4d79588221235028a5fc100d2
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/gdk-pixbuf-0.18.0-610.i586.rpm
0748a443ba301f2538650cd7145edf53
patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/gtk2-2.2.3-54.i586.patch.rpm
87aa3c619340a1dd8e70695171eb5597
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/gdk-pixbuf-0.18.0-610.i586.patch.rpm
d2be310f9f9d222ebf3979e65c23746e
source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/src/gtk2-2.2.3-54.src.rpm
67798c77985fbb707011c52035bc31e1
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/src/gdk-pixbuf-0.18.0-610.src.rpm
ab9854039bbcdde141b9ddd666cc67cc
SUSE Linux 8.2:
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/gtk2-2.2.1-102.i586.rpm
bd5acc20314f84cfc5ef157dd413e103
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/gdk-pixbuf-0.18.0-609.i586.rpm
ecc397996e6efae04e65db962225a09b
patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/gtk2-2.2.1-102.i586.patch.rpm
b852ce69a5927922488e8476ab538cbb
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/gdk-pixbuf-0.18.0-609.i586.patch.rpm
1f8a531333bcea1931aa55458d74783a
source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/src/gtk2-2.2.1-102.src.rpm
cb96ca0160702b23bfa947df9dd6a75b
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/src/gdk-pixbuf-0.18.0-609.src.rpm
19c65cf5e847efec236d5c1c1c5bf68c
SUSE Linux 8.1:
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/gtk2-2.0.6-154.i586.rpm
0deb5df027c6f5380927c688ae2015aa
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/gdk-pixbuf-0.18.0-609.i586.rpm
635848714d0e82daf67bbdb184b82e1c
patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/gtk2-2.0.6-154.i586.patch.rpm
317bf98a5ee87dd6b3e62ef29144ad92
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/gdk-pixbuf-0.18.0-609.i586.patch.rpm
4066bfc94676589f097b0bfe5492f2b5
source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/src/gtk2-2.0.6-154.src.rpm
7283265c139a32de9cc62eb9ed52d312
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/src/gdk-pixbuf-0.18.0-609.src.rpm
0496d349d3174f8acf4e51f3c617aa59
x86-64 Platform:
SUSE Linux 9.1:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/gtk2-2.2.4-125.4.x86_64.rpm
510586d509e3010b24ea7ed848132291
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/gdk-pixbuf-0.22.0-62.7.x86_64.rpm
24fbedab59dfd403bda2492102d21487
patch rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/gtk2-2.2.4-125.4.x86_64.patch.rpm
7eb6e9adc8509cd356094c460809324a
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/gdk-pixbuf-0.22.0-62.7.x86_64.patch.rpm
43fc35b1805d48eb2c488033ffb05162
source rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/gtk2-2.2.4-125.4.src.rpm
bda00431cb962a10f973f5553b94a2cf
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/gdk-pixbuf-0.22.0-62.7.src.rpm
14a1a69061096c93f7532afc9bc3dd2d
SUSE Linux 9.0:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/gtk2-2.2.3-54.x86_64.rpm
90a63449d75cbc2ab698f500eb596987
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/gdk-pixbuf-0.18.0-610.x86_64.rpm
20d0ddb67ef73a71b271e4a66fd613a2
patch rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/gtk2-2.2.3-54.x86_64.patch.rpm
230ecdddec3899cecf93390a9922578d
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/gdk-pixbuf-0.18.0-610.x86_64.patch.rpm
338cf1416be210ab9e3c49c7b9088074
source rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/src/gtk2-2.2.3-54.src.rpm
851fa924bd79e6f1995797ea3d3bea52
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/src/gdk-pixbuf-0.18.0-610.src.rpm
f90e100d97a015e065b0bb849349d59c
______________________________________________________________________________
5) Pending vulnerabilities in SUSE Distributions and Workarounds:
- mozilla
We are in the process of releasing updates for mozilla (and related
browsers), fixing various issues: CAN-2004-0597, CAN-2004-0718,
CAN-2004-0722, CAN-2004-0757, CAN-2004-0758, CAN-2004-0759, CAN-2004-
0760, CAN-2004-0761, CAN-2004-0762, CAN-2004-0763, CAN-2004-0764 and
CAN-2004-0765.
We will give you concrete details in a separate mozilla advisory when
the updates are available.
- mc
The console filesystem browser mc was found vulnerable to various
meta-char attacks in the extfs perl and shell scripts. These bugs
can be exploited by providing a malformed archive file to a victim
user to execute shell commands with her/his privileges.
(CAN-2004-0494)
New packages will be available soon.
- squid
Certain malformed NTLMSSP packets can crash the NTLM helpers
provided by Squid (CAN-2004-0832).
New packages will be available soon.
- gaim
This security update fixes four security issues which are registered as:
+ CAN-2004-0754
An integer overflow in the groupware message handler exists in Gaim.
+ CAN-2004-0784
A shell escape vulnerability in the handling of smiley theme tar-
ball filenames could lead to arbitrary command execution.
+ CAN-2004-0785
Buffer overflows in Gaim could lead to a denial of service or
arbitrary code execution.
Additionally a buffer overflow in the URL parsing code of gaim is fixed.
This bug let to remote system compromise with the privileges of the user
running gaim.
- nessus
The nessus-adduser creates temporary files in $TMPDIR in an insecure
manner.
New packages will be available soon.
______________________________________________________________________________
6) standard appendix: authenticity verification, additional information
- Package authenticity verification:
SUSE update packages are available on many mirror ftp servers all over
the world. While this service is being considered valuable and important
to the free and open source software community, many users wish to be
sure about the origin of the package and its content before installing
the package. There are two verification methods that can be used
independently from each other to prove the authenticity of a downloaded
file or rpm package:
1) md5sums as provided in the (cryptographically signed) announcement.
2) using the internal gpg signatures of the rpm package.
1) execute the command
md5sum
participants (1)
-
Ludwig Nussel