[Bug 214676] New: CVE-2006-480[6-9] imlib2 multiple vulnerabilities

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.




https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214676

           Summary: CVE-2006-480[6-9] imlib2 multiple vulnerabilities
           Product: Fedora Extras
           Version: fc6
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: normal
         Component: imlib2
        AssignedTo: j.w.r.degoede(a)hhs.nl
        ReportedBy: ville.skytta(a)iki.fi
         QAContact: extras-qa(a)fedoraproject.org
                CC: extras-qa(a)fedoraproject.org,fedora-security-
                    list(a)redhat.com


Multiple vulnerabilities in imlib2:

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4806
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4807
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4808
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4809

Some of the reports mention "before 1.2.1", but at least some of the issues
seem
to be present in 1.2.2 and 1.3.0 too.

FreeBSD's patches (apparently originally from Ubuntu) for these issues are
available at http://www.freebsd.org/cgi/cvsweb.cgi/ports/graphics/imlib2/files/

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug 214676] CVE-2006-480[6-9] imlib2 multiple vulnerabilities

[Red Hat Bugzilla]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: CVE-2006-480[6-9] imlib2 multiple vulnerabilities


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214676


j.w.r.degoede(a)hhs.nl changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CLOSED
         Resolution|                            |NEXTRELEASE




------- Additional Comments From j.w.r.degoede(a)hhs.nl  2006-11-09 05:33 EST -------
Thanks for reporting this. I've pushed imlib2 updates for FC-3 - FC-6 and devel
and I'll start writing an advisory right away.


-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.