Package: gtk+2.0 Severity: important Tags: security [ Dear security team: You can test whether Woody is affected by loading this image into gqview; if it causes a lockup it's affected as well: http://bugzilla.gnome.org/attachment.cgi?id=39270&action=view ]
Attackers can cause DoS against applications using GTK through BMP images without palette information, which will lead into a double free(). See http://bugzilla.gnome.org/show_bug.cgi?id=171707 for full details and a patch. Please refer to CAN-2005-0891 when fixing this. Cheers, Moritz -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.11 Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
