-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2008:077 http://www.mandriva.com/security/ _______________________________________________________________________ Package : perl-Tk Date : March 26, 2008 Affected: 2007.0, 2007.1, 2008.0, Corporate 3.0, Corporate 4.0 _______________________________________________________________________ Problem Description: A vulnerability in perl-Tk was found where specially crafted GIF images could crash perl-Tk (an identical issue to that found in php-gd, gd, and SDL_image). The updated packages have been patched to correct this issue. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4484 _______________________________________________________________________ Updated Packages: Mandriva Linux 2007.0: 617890813c4fbde09881f93318d8fb0c 2007.0/i586/perl-Tk-804.027-7.1mdv2007.0.i586.rpm e9a52dbb6ae3c66329e8804db7540255 2007.0/i586/perl-Tk-devel-804.027-7.1mdv2007.0.i586.rpm 62ec6966a6e1b75a32cc69ba429383d9 2007.0/i586/perl-Tk-doc-804.027-7.1mdv2007.0.i586.rpm 35c904dd5d8fdfcb1289cff6f5683ffd 2007.0/SRPMS/perl-Tk-804.027-7.1mdv2007.0.src.rpm Mandriva Linux 2007.0/X86_64: 1c90b8668b367864a7a745e7c5fe7a3e 2007.0/x86_64/perl-Tk-804.027-7.1mdv2007.0.x86_64.rpm 94e06f5c06bdaaca2387d78f883bd42b 2007.0/x86_64/perl-Tk-devel-804.027-7.1mdv2007.0.x86_64.rpm c716b24bd69c972f60d8a77a297571fb 2007.0/x86_64/perl-Tk-doc-804.027-7.1mdv2007.0.x86_64.rpm 35c904dd5d8fdfcb1289cff6f5683ffd 2007.0/SRPMS/perl-Tk-804.027-7.1mdv2007.0.src.rpm Mandriva Linux 2007.1: ccd8c93b6638f18f44956e3a7976843f 2007.1/i586/perl-Tk-804.027-7.1mdv2007.1.i586.rpm 6f36c284047f89d996039a4890ef24a5 2007.1/i586/perl-Tk-devel-804.027-7.1mdv2007.1.i586.rpm ea68a42b822f65622c08401438e18f3a 2007.1/i586/perl-Tk-doc-804.027-7.1mdv2007.1.i586.rpm ba77b6b3ba20990bb584112edd8a8a11 2007.1/SRPMS/perl-Tk-804.027-7.1mdv2007.1.src.rpm Mandriva Linux 2007.1/X86_64: 64c30b9a6521ee330c3ab503c7af4a81 2007.1/x86_64/perl-Tk-804.027-7.1mdv2007.1.x86_64.rpm 3af0d32f148366759bc38b6ebe9d0ed2 2007.1/x86_64/perl-Tk-devel-804.027-7.1mdv2007.1.x86_64.rpm a7deec6b34f5ae1b4a2415f184fce3f6 2007.1/x86_64/perl-Tk-doc-804.027-7.1mdv2007.1.x86_64.rpm ba77b6b3ba20990bb584112edd8a8a11 2007.1/SRPMS/perl-Tk-804.027-7.1mdv2007.1.src.rpm Mandriva Linux 2008.0: c0640864a0032ccb32e154b1eeb31e46 2008.0/i586/perl-Tk-804.027-7.1mdv2008.0.i586.rpm cc4587989566c6cc9834aa766a97de70 2008.0/i586/perl-Tk-devel-804.027-7.1mdv2008.0.i586.rpm bbff9b65728eb4be47ffd4fdde627364 2008.0/i586/perl-Tk-doc-804.027-7.1mdv2008.0.i586.rpm 08a52245b151a07de2f1ff578f5b94d4 2008.0/SRPMS/perl-Tk-804.027-7.1mdv2008.0.src.rpm Mandriva Linux 2008.0/X86_64: 4784cc19583484e691657d027557e273 2008.0/x86_64/perl-Tk-804.027-7.1mdv2008.0.x86_64.rpm e2cb98338952dbcf381ac41755c5bbcf 2008.0/x86_64/perl-Tk-devel-804.027-7.1mdv2008.0.x86_64.rpm 8f5e35f7f7ddffe3a0bc557fc7124f97 2008.0/x86_64/perl-Tk-doc-804.027-7.1mdv2008.0.x86_64.rpm 08a52245b151a07de2f1ff578f5b94d4 2008.0/SRPMS/perl-Tk-804.027-7.1mdv2008.0.src.rpm Corporate 3.0: 664977154c6d3a6cf097535e4e4cffb6 corporate/3.0/i586/perl-Tk-800.024-4.1.C30mdk.i586.rpm 7ac67c7e4768fda4bc24f64f46de052f corporate/3.0/i586/perl-Tk-devel-800.024-4.1.C30mdk.i586.rpm 86a465731211ca4f8b5eb06736580f7a corporate/3.0/i586/perl-Tk-doc-800.024-4.1.C30mdk.i586.rpm efeb7e3c708c1891dca5291e89a90ffb corporate/3.0/SRPMS/perl-Tk-800.024-4.1.C30mdk.src.rpm Corporate 3.0/X86_64: e273a52a8ce4b4df938f6f1a332c5a9a corporate/3.0/x86_64/perl-Tk-800.024-4.1.C30mdk.x86_64.rpm c626b81ebcca6319a493da41daa64c59 corporate/3.0/x86_64/perl-Tk-devel-800.024-4.1.C30mdk.x86_64.rpm 59ba63dec80a1409340053b8d036c16a corporate/3.0/x86_64/perl-Tk-doc-800.024-4.1.C30mdk.x86_64.rpm efeb7e3c708c1891dca5291e89a90ffb corporate/3.0/SRPMS/perl-Tk-800.024-4.1.C30mdk.src.rpm Corporate 4.0: 40a305aea1ccccac122eeaa29623fc9d corporate/4.0/i586/perl-Tk-804.027-4.1.20060mlcs4.i586.rpm 500f724e392a66d8b77883ef45bb0d27 corporate/4.0/i586/perl-Tk-devel-804.027-4.1.20060mlcs4.i586.rpm c37c8e2110050388d91fb82f23bc365a corporate/4.0/i586/perl-Tk-doc-804.027-4.1.20060mlcs4.i586.rpm 57e6e403c1e65b45c85ea086a3dcf861 corporate/4.0/SRPMS/perl-Tk-804.027-4.1.20060mlcs4.src.rpm Corporate 4.0/X86_64: 33856879c459ad1b8d105860d6a93bdf corporate/4.0/x86_64/perl-Tk-804.027-4.1.20060mlcs4.x86_64.rpm cd1461f7f031beea459abbcecfd74780 corporate/4.0/x86_64/perl-Tk-devel-804.027-4.1.20060mlcs4.x86_64.rpm fa087aea0cf09672dd2a25e57461ab15 corporate/4.0/x86_64/perl-Tk-doc-804.027-4.1.20060mlcs4.x86_64.rpm 57e6e403c1e65b45c85ea086a3dcf861 corporate/4.0/SRPMS/perl-Tk-804.027-4.1.20060mlcs4.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (GNU/Linux) iD8DBQFH6rp4mqjQ0CJFipgRAqQiAJ4i8fJCHSoQbNvC0NicfGKWn7FfmwCePm8Q V47v9hN1u8VDgaYEMeUm9Qs= =sPW1 -----END PGP SIGNATURE-----
