-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2010:109 http://www.mandriva.com/security/ _______________________________________________________________________ Package : gtk+2.0 Date : May 27, 2010 Affected: 2008.0, 2009.0, 2009.1, Corporate 4.0, Enterprise Server 5.0 _______________________________________________________________________ Problem Description: A vulnerability was discovered and fixed in gtk+2.0: gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on windows of type GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances and consequently allows physically proximate attackers to bypass screen locking and access an unattended workstation by pressing the Enter key many times (CVE-2010-0732). Packages for 2008.0 and 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/product_info.php?cPath=149&products_id=490 This update fixes this issue. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0732 _______________________________________________________________________ Updated Packages: Mandriva Linux 2008.0: c3a29224a7ab7f869fad3541908f6eff 2008.0/i586/gtk+2.0-2.12.1-2.2mdv2008.0.i586.rpm f3b1608da1dce0eb474b1f21bd77d75b 2008.0/i586/libgdk_pixbuf2.0_0-2.12.1-2.2mdv2008.0.i586.rpm 040a1ca71f7eadb280de43c92e49c17d 2008.0/i586/libgdk_pixbuf2.0_0-devel-2.12.1-2.2mdv2008.0.i586.rpm 57e8f954302b4c65ade25df18a6c95df 2008.0/i586/libgtk+2.0_0-2.12.1-2.2mdv2008.0.i586.rpm 49419f6f92d6b0ec484aced9de1bab2e 2008.0/i586/libgtk+2.0_0-devel-2.12.1-2.2mdv2008.0.i586.rpm 00b2ead1a22168be0125f115d8f0acb1 2008.0/i586/libgtk+-x11-2.0_0-2.12.1-2.2mdv2008.0.i586.rpm e6ad155061eed97be73cd9cc8a52a0d9 2008.0/SRPMS/gtk+2.0-2.12.1-2.2mdv2008.0.src.rpm Mandriva Linux 2008.0/X86_64: 311dd4f3603ff9759e1136eeecaee89b 2008.0/x86_64/gtk+2.0-2.12.1-2.2mdv2008.0.x86_64.rpm 1af93ae5f0a506d4bd96d488335b4aa4 2008.0/x86_64/lib64gdk_pixbuf2.0_0-2.12.1-2.2mdv2008.0.x86_64.rpm 90ad7d83058d56e88961cbb4a4087b74 2008.0/x86_64/lib64gdk_pixbuf2.0_0-devel-2.12.1-2.2mdv2008.0.x86_64.rpm 67e8e76883260fff690d6b04ebb89cfc 2008.0/x86_64/lib64gtk+2.0_0-2.12.1-2.2mdv2008.0.x86_64.rpm 129c65e8a1b8ba370556de12547c9f5c 2008.0/x86_64/lib64gtk+2.0_0-devel-2.12.1-2.2mdv2008.0.x86_64.rpm 57e9f7712ed1f9eda1a1729c29049f8d 2008.0/x86_64/lib64gtk+-x11-2.0_0-2.12.1-2.2mdv2008.0.x86_64.rpm e6ad155061eed97be73cd9cc8a52a0d9 2008.0/SRPMS/gtk+2.0-2.12.1-2.2mdv2008.0.src.rpm Mandriva Linux 2009.0: bcd63973ddb957847088f71b5cfc039b 2009.0/i586/gtk+2.0-2.14.3-2.1mdv2009.0.i586.rpm 9b46f9018c8fbb2d1e052e0cdd473ff4 2009.0/i586/libgail18-2.14.3-2.1mdv2009.0.i586.rpm 4d243b829780c8d2f35b4a5f08ac9acb 2009.0/i586/libgail-devel-2.14.3-2.1mdv2009.0.i586.rpm a8ca74ec343faac9f4445cfc88b5accc 2009.0/i586/libgdk_pixbuf2.0_0-2.14.3-2.1mdv2009.0.i586.rpm 583607af6457480c4cb71af16f6f4563 2009.0/i586/libgdk_pixbuf2.0_0-devel-2.14.3-2.1mdv2009.0.i586.rpm 8b9b0c013bc5815e5803b3be4e681433 2009.0/i586/libgtk+2.0_0-2.14.3-2.1mdv2009.0.i586.rpm 10f6558dc95fe770c87e99f711c089fb 2009.0/i586/libgtk+2.0_0-devel-2.14.3-2.1mdv2009.0.i586.rpm 23eb8c8cfc87a4209b125b8909fb8a9b 2009.0/i586/libgtk+-x11-2.0_0-2.14.3-2.1mdv2009.0.i586.rpm d301fc61a2c8dc41a436edb699061955 2009.0/SRPMS/gtk+2.0-2.14.3-2.1mdv2009.0.src.rpm Mandriva Linux 2009.0/X86_64: 6999641e621f9ee15bc439e0fe9b981f 2009.0/x86_64/gtk+2.0-2.14.3-2.1mdv2009.0.x86_64.rpm 33851500c872f253715d11fc1f0b908d 2009.0/x86_64/lib64gail18-2.14.3-2.1mdv2009.0.x86_64.rpm 47eaee7ac4576291e0974d7117a89459 2009.0/x86_64/lib64gail-devel-2.14.3-2.1mdv2009.0.x86_64.rpm e2b68a8d746c9bb2bd515c93220ed73d 2009.0/x86_64/lib64gdk_pixbuf2.0_0-2.14.3-2.1mdv2009.0.x86_64.rpm 62060cfea7c077bebf712ddeea8960f1 2009.0/x86_64/lib64gdk_pixbuf2.0_0-devel-2.14.3-2.1mdv2009.0.x86_64.rpm c191760f279fc7ef06bef3e37d3a5f82 2009.0/x86_64/lib64gtk+2.0_0-2.14.3-2.1mdv2009.0.x86_64.rpm 8c3cbfa56ca337b7e76ede7cdb6bf2dd 2009.0/x86_64/lib64gtk+2.0_0-devel-2.14.3-2.1mdv2009.0.x86_64.rpm 650995e6bec10b2d424b708e1be21d2f 2009.0/x86_64/lib64gtk+-x11-2.0_0-2.14.3-2.1mdv2009.0.x86_64.rpm d301fc61a2c8dc41a436edb699061955 2009.0/SRPMS/gtk+2.0-2.14.3-2.1mdv2009.0.src.rpm Mandriva Linux 2009.1: f2396f78726e185da0c3bef4d762e8d0 2009.1/i586/gtk+2.0-2.16.1-4.1mdv2009.1.i586.rpm 07d45a8c633b79b3769035bcb0612a4b 2009.1/i586/libgail18-2.16.1-4.1mdv2009.1.i586.rpm 9110a10744b8f30bbcf67cd8c03eb4c7 2009.1/i586/libgail-devel-2.16.1-4.1mdv2009.1.i586.rpm 6f6edd01aec6960ddef6da316deb0e67 2009.1/i586/libgdk_pixbuf2.0_0-2.16.1-4.1mdv2009.1.i586.rpm 1e74c1e51677679f4d1f717253bac8f8 2009.1/i586/libgdk_pixbuf2.0_0-devel-2.16.1-4.1mdv2009.1.i586.rpm e0e5a02076551f016ea6e6589f730889 2009.1/i586/libgtk+2.0_0-2.16.1-4.1mdv2009.1.i586.rpm 0c60691889b01ef91fdc10c31d9f7a44 2009.1/i586/libgtk+2.0_0-devel-2.16.1-4.1mdv2009.1.i586.rpm ce7bebde4979c54ed0b73c0d6a45c973 2009.1/i586/libgtk+-x11-2.0_0-2.16.1-4.1mdv2009.1.i586.rpm 6aa3cd35d549c1196922e8301f426db7 2009.1/SRPMS/gtk+2.0-2.16.1-4.1mdv2009.1.src.rpm Mandriva Linux 2009.1/X86_64: ce505e19d99cf9fdcfee3b10f8c58527 2009.1/x86_64/gtk+2.0-2.16.1-4.1mdv2009.1.x86_64.rpm 77442eb6613fecc7347e165e1f9830a6 2009.1/x86_64/lib64gail18-2.16.1-4.1mdv2009.1.x86_64.rpm 2a0429f85ee92c150ae4869a688b1601 2009.1/x86_64/lib64gail-devel-2.16.1-4.1mdv2009.1.x86_64.rpm 502a01d2c51a10a523f6ca517ab1ac03 2009.1/x86_64/lib64gdk_pixbuf2.0_0-2.16.1-4.1mdv2009.1.x86_64.rpm e1614cfcf1baef0af2fa796b1efa01cd 2009.1/x86_64/lib64gdk_pixbuf2.0_0-devel-2.16.1-4.1mdv2009.1.x86_64.rpm b3048473a02a234d4e11f594276b4cc7 2009.1/x86_64/lib64gtk+2.0_0-2.16.1-4.1mdv2009.1.x86_64.rpm cddd82c64d1cf1ea6f4f09cc1298887f 2009.1/x86_64/lib64gtk+2.0_0-devel-2.16.1-4.1mdv2009.1.x86_64.rpm 8483720dfddcaca2596bcb3ea6c7d083 2009.1/x86_64/lib64gtk+-x11-2.0_0-2.16.1-4.1mdv2009.1.x86_64.rpm 6aa3cd35d549c1196922e8301f426db7 2009.1/SRPMS/gtk+2.0-2.16.1-4.1mdv2009.1.src.rpm Corporate 4.0: 0ae2bde2a8110529a3264873d4286212 corporate/4.0/i586/gtk+2.0-2.8.3-4.4.20060mlcs4.i586.rpm 767685aae1b2911d834d929471344fec corporate/4.0/i586/libgdk_pixbuf2.0_0-2.8.3-4.4.20060mlcs4.i586.rpm 4a9f22f438875e2f60daed8bc243adc4 corporate/4.0/i586/libgdk_pixbuf2.0_0-devel-2.8.3-4.4.20060mlcs4.i586.rpm 1f7ef426ce7aeb211403debacb5e1d84 corporate/4.0/i586/libgtk+2.0_0-2.8.3-4.4.20060mlcs4.i586.rpm 3a550de7eed2fec9c99757cfa66e2920 corporate/4.0/i586/libgtk+2.0_0-devel-2.8.3-4.4.20060mlcs4.i586.rpm 84008c122de9aa323340bb295ed9e089 corporate/4.0/i586/libgtk+-x11-2.0_0-2.8.3-4.4.20060mlcs4.i586.rpm 622fba84b6f40c807e45f2ba8350e393 corporate/4.0/SRPMS/gtk+2.0-2.8.3-4.4.20060mlcs4.src.rpm Corporate 4.0/X86_64: e6c4ac5d0cc5c5096980f11f3048831e corporate/4.0/x86_64/gtk+2.0-2.8.3-4.4.20060mlcs4.x86_64.rpm 9e439be03915be4d385e844064de2bf0 corporate/4.0/x86_64/lib64gdk_pixbuf2.0_0-2.8.3-4.4.20060mlcs4.x86_64.rpm 548d7bdadec30152cd8ed125332d8169 corporate/4.0/x86_64/lib64gdk_pixbuf2.0_0-devel-2.8.3-4.4.20060mlcs4.x86_64.rpm fcdf5eb7a865f6a26ba70947df20fb06 corporate/4.0/x86_64/lib64gtk+2.0_0-2.8.3-4.4.20060mlcs4.x86_64.rpm 7f6ae0aab6b8c80af0396199f0865d3a corporate/4.0/x86_64/lib64gtk+2.0_0-devel-2.8.3-4.4.20060mlcs4.x86_64.rpm 1dc4c1312a013adbb66658a1327414ed corporate/4.0/x86_64/lib64gtk+-x11-2.0_0-2.8.3-4.4.20060mlcs4.x86_64.rpm 622fba84b6f40c807e45f2ba8350e393 corporate/4.0/SRPMS/gtk+2.0-2.8.3-4.4.20060mlcs4.src.rpm Mandriva Enterprise Server 5: 760ed4665a40b3fde0c15fa9d2692a1a mes5/i586/gtk+2.0-2.14.3-2.1mdvmes5.1.i586.rpm 890959e5def2126453e7d148979f69a4 mes5/i586/libgail18-2.14.3-2.1mdvmes5.1.i586.rpm a6d398c6f8880269107ef97d3cc1a539 mes5/i586/libgail-devel-2.14.3-2.1mdvmes5.1.i586.rpm 5cea1edcdfa14f0feb895fc352c6f3e4 mes5/i586/libgdk_pixbuf2.0_0-2.14.3-2.1mdvmes5.1.i586.rpm 7e700ed416c7429537dd3375d22d185e mes5/i586/libgdk_pixbuf2.0_0-devel-2.14.3-2.1mdvmes5.1.i586.rpm 6200d92b320fe8b3c16eeb35f5645651 mes5/i586/libgtk+2.0_0-2.14.3-2.1mdvmes5.1.i586.rpm 8db1105ffa383ad54593805784b31283 mes5/i586/libgtk+2.0_0-devel-2.14.3-2.1mdvmes5.1.i586.rpm 43b14eb35a4ab62fe51eb17d5b86a93b mes5/i586/libgtk+-x11-2.0_0-2.14.3-2.1mdvmes5.1.i586.rpm a657d365ff839ee3a2a0ebb72d290cdc mes5/SRPMS/gtk+2.0-2.14.3-2.1mdvmes5.1.src.rpm Mandriva Enterprise Server 5/X86_64: e93453ce255fdae6f6d712b21e70bf9c mes5/x86_64/gtk+2.0-2.14.3-2.1mdvmes5.1.x86_64.rpm b4694b5b1bc7234ec2605c742aa1106c mes5/x86_64/lib64gail18-2.14.3-2.1mdvmes5.1.x86_64.rpm 279970ee4c96b2fe22f0e7eb3a4d2aab mes5/x86_64/lib64gail-devel-2.14.3-2.1mdvmes5.1.x86_64.rpm 75b722930a354ac78629b186e49bacd3 mes5/x86_64/lib64gdk_pixbuf2.0_0-2.14.3-2.1mdvmes5.1.x86_64.rpm b7367c9e1204038a1ece45a8090b1c08 mes5/x86_64/lib64gdk_pixbuf2.0_0-devel-2.14.3-2.1mdvmes5.1.x86_64.rpm 88f2b9c887f2a33c4d48119dfe71a888 mes5/x86_64/lib64gtk+2.0_0-2.14.3-2.1mdvmes5.1.x86_64.rpm e9eafb8ee40f13074ed6e4e1aca4c65c mes5/x86_64/lib64gtk+2.0_0-devel-2.14.3-2.1mdvmes5.1.x86_64.rpm c9a3f5de6bb9a073a0e88ce3ee1ef5e6 mes5/x86_64/lib64gtk+-x11-2.0_0-2.14.3-2.1mdvmes5.1.x86_64.rpm a657d365ff839ee3a2a0ebb72d290cdc mes5/SRPMS/gtk+2.0-2.14.3-2.1mdvmes5.1.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iD8DBQFL/l6wmqjQ0CJFipgRArPEAKCjOMl44IdKwIYcOQDeJiW1xDwoegCeJ6Eo oHX5TFkOzJlWesVZAPGxJKQ= =UJoI -----END PGP SIGNATURE-----
