lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list] 
Message-Id: <E1OHf05-0000zd-7Q@titan.mandriva.com>
Date: Thu, 27 May 2010 17:28:00 +0200
From: security@...driva.com
To: full-disclosure@...ts.grok.org.uk
Subject: [ MDVSA-2010:109 ] gtk+2.0


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2010:109
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : gtk+2.0
 Date    : May 27, 2010
 Affected: 2008.0, 2009.0, 2009.1, Corporate 4.0, Enterprise Server 5.0
 _______________________________________________________________________

 Problem Description:

 A vulnerability was discovered and fixed in gtk+2.0:
 
 gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver
 before 2.28.1, performs implicit paints on windows of type
 GDK_WINDOW_FOREIGN, which triggers an X error in certain circumstances
 and consequently allows physically proximate attackers to bypass
 screen locking and access an unattended workstation by pressing the
 Enter key many times (CVE-2010-0732).
 
 Packages for 2008.0 and 2009.0 are provided as of the Extended
 Maintenance Program. Please visit this link to learn more:
 http://store.mandriva.com/product_info.php?cPath=149&products_id=490
 
 This update fixes this issue.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0732
 _______________________________________________________________________

 Updated Packages:

 Mandriva Linux 2008.0:
 c3a29224a7ab7f869fad3541908f6eff  2008.0/i586/gtk+2.0-2.12.1-2.2mdv2008.0.i586.rpm
 f3b1608da1dce0eb474b1f21bd77d75b  2008.0/i586/libgdk_pixbuf2.0_0-2.12.1-2.2mdv2008.0.i586.rpm
 040a1ca71f7eadb280de43c92e49c17d  2008.0/i586/libgdk_pixbuf2.0_0-devel-2.12.1-2.2mdv2008.0.i586.rpm
 57e8f954302b4c65ade25df18a6c95df  2008.0/i586/libgtk+2.0_0-2.12.1-2.2mdv2008.0.i586.rpm
 49419f6f92d6b0ec484aced9de1bab2e  2008.0/i586/libgtk+2.0_0-devel-2.12.1-2.2mdv2008.0.i586.rpm
 00b2ead1a22168be0125f115d8f0acb1  2008.0/i586/libgtk+-x11-2.0_0-2.12.1-2.2mdv2008.0.i586.rpm 
 e6ad155061eed97be73cd9cc8a52a0d9  2008.0/SRPMS/gtk+2.0-2.12.1-2.2mdv2008.0.src.rpm

 Mandriva Linux 2008.0/X86_64:
 311dd4f3603ff9759e1136eeecaee89b  2008.0/x86_64/gtk+2.0-2.12.1-2.2mdv2008.0.x86_64.rpm
 1af93ae5f0a506d4bd96d488335b4aa4  2008.0/x86_64/lib64gdk_pixbuf2.0_0-2.12.1-2.2mdv2008.0.x86_64.rpm
 90ad7d83058d56e88961cbb4a4087b74  2008.0/x86_64/lib64gdk_pixbuf2.0_0-devel-2.12.1-2.2mdv2008.0.x86_64.rpm
 67e8e76883260fff690d6b04ebb89cfc  2008.0/x86_64/lib64gtk+2.0_0-2.12.1-2.2mdv2008.0.x86_64.rpm
 129c65e8a1b8ba370556de12547c9f5c  2008.0/x86_64/lib64gtk+2.0_0-devel-2.12.1-2.2mdv2008.0.x86_64.rpm
 57e9f7712ed1f9eda1a1729c29049f8d  2008.0/x86_64/lib64gtk+-x11-2.0_0-2.12.1-2.2mdv2008.0.x86_64.rpm 
 e6ad155061eed97be73cd9cc8a52a0d9  2008.0/SRPMS/gtk+2.0-2.12.1-2.2mdv2008.0.src.rpm

 Mandriva Linux 2009.0:
 bcd63973ddb957847088f71b5cfc039b  2009.0/i586/gtk+2.0-2.14.3-2.1mdv2009.0.i586.rpm
 9b46f9018c8fbb2d1e052e0cdd473ff4  2009.0/i586/libgail18-2.14.3-2.1mdv2009.0.i586.rpm
 4d243b829780c8d2f35b4a5f08ac9acb  2009.0/i586/libgail-devel-2.14.3-2.1mdv2009.0.i586.rpm
 a8ca74ec343faac9f4445cfc88b5accc  2009.0/i586/libgdk_pixbuf2.0_0-2.14.3-2.1mdv2009.0.i586.rpm
 583607af6457480c4cb71af16f6f4563  2009.0/i586/libgdk_pixbuf2.0_0-devel-2.14.3-2.1mdv2009.0.i586.rpm
 8b9b0c013bc5815e5803b3be4e681433  2009.0/i586/libgtk+2.0_0-2.14.3-2.1mdv2009.0.i586.rpm
 10f6558dc95fe770c87e99f711c089fb  2009.0/i586/libgtk+2.0_0-devel-2.14.3-2.1mdv2009.0.i586.rpm
 23eb8c8cfc87a4209b125b8909fb8a9b  2009.0/i586/libgtk+-x11-2.0_0-2.14.3-2.1mdv2009.0.i586.rpm 
 d301fc61a2c8dc41a436edb699061955  2009.0/SRPMS/gtk+2.0-2.14.3-2.1mdv2009.0.src.rpm

 Mandriva Linux 2009.0/X86_64:
 6999641e621f9ee15bc439e0fe9b981f  2009.0/x86_64/gtk+2.0-2.14.3-2.1mdv2009.0.x86_64.rpm
 33851500c872f253715d11fc1f0b908d  2009.0/x86_64/lib64gail18-2.14.3-2.1mdv2009.0.x86_64.rpm
 47eaee7ac4576291e0974d7117a89459  2009.0/x86_64/lib64gail-devel-2.14.3-2.1mdv2009.0.x86_64.rpm
 e2b68a8d746c9bb2bd515c93220ed73d  2009.0/x86_64/lib64gdk_pixbuf2.0_0-2.14.3-2.1mdv2009.0.x86_64.rpm
 62060cfea7c077bebf712ddeea8960f1  2009.0/x86_64/lib64gdk_pixbuf2.0_0-devel-2.14.3-2.1mdv2009.0.x86_64.rpm
 c191760f279fc7ef06bef3e37d3a5f82  2009.0/x86_64/lib64gtk+2.0_0-2.14.3-2.1mdv2009.0.x86_64.rpm
 8c3cbfa56ca337b7e76ede7cdb6bf2dd  2009.0/x86_64/lib64gtk+2.0_0-devel-2.14.3-2.1mdv2009.0.x86_64.rpm
 650995e6bec10b2d424b708e1be21d2f  2009.0/x86_64/lib64gtk+-x11-2.0_0-2.14.3-2.1mdv2009.0.x86_64.rpm 
 d301fc61a2c8dc41a436edb699061955  2009.0/SRPMS/gtk+2.0-2.14.3-2.1mdv2009.0.src.rpm

 Mandriva Linux 2009.1:
 f2396f78726e185da0c3bef4d762e8d0  2009.1/i586/gtk+2.0-2.16.1-4.1mdv2009.1.i586.rpm
 07d45a8c633b79b3769035bcb0612a4b  2009.1/i586/libgail18-2.16.1-4.1mdv2009.1.i586.rpm
 9110a10744b8f30bbcf67cd8c03eb4c7  2009.1/i586/libgail-devel-2.16.1-4.1mdv2009.1.i586.rpm
 6f6edd01aec6960ddef6da316deb0e67  2009.1/i586/libgdk_pixbuf2.0_0-2.16.1-4.1mdv2009.1.i586.rpm
 1e74c1e51677679f4d1f717253bac8f8  2009.1/i586/libgdk_pixbuf2.0_0-devel-2.16.1-4.1mdv2009.1.i586.rpm
 e0e5a02076551f016ea6e6589f730889  2009.1/i586/libgtk+2.0_0-2.16.1-4.1mdv2009.1.i586.rpm
 0c60691889b01ef91fdc10c31d9f7a44  2009.1/i586/libgtk+2.0_0-devel-2.16.1-4.1mdv2009.1.i586.rpm
 ce7bebde4979c54ed0b73c0d6a45c973  2009.1/i586/libgtk+-x11-2.0_0-2.16.1-4.1mdv2009.1.i586.rpm 
 6aa3cd35d549c1196922e8301f426db7  2009.1/SRPMS/gtk+2.0-2.16.1-4.1mdv2009.1.src.rpm

 Mandriva Linux 2009.1/X86_64:
 ce505e19d99cf9fdcfee3b10f8c58527  2009.1/x86_64/gtk+2.0-2.16.1-4.1mdv2009.1.x86_64.rpm
 77442eb6613fecc7347e165e1f9830a6  2009.1/x86_64/lib64gail18-2.16.1-4.1mdv2009.1.x86_64.rpm
 2a0429f85ee92c150ae4869a688b1601  2009.1/x86_64/lib64gail-devel-2.16.1-4.1mdv2009.1.x86_64.rpm
 502a01d2c51a10a523f6ca517ab1ac03  2009.1/x86_64/lib64gdk_pixbuf2.0_0-2.16.1-4.1mdv2009.1.x86_64.rpm
 e1614cfcf1baef0af2fa796b1efa01cd  2009.1/x86_64/lib64gdk_pixbuf2.0_0-devel-2.16.1-4.1mdv2009.1.x86_64.rpm
 b3048473a02a234d4e11f594276b4cc7  2009.1/x86_64/lib64gtk+2.0_0-2.16.1-4.1mdv2009.1.x86_64.rpm
 cddd82c64d1cf1ea6f4f09cc1298887f  2009.1/x86_64/lib64gtk+2.0_0-devel-2.16.1-4.1mdv2009.1.x86_64.rpm
 8483720dfddcaca2596bcb3ea6c7d083  2009.1/x86_64/lib64gtk+-x11-2.0_0-2.16.1-4.1mdv2009.1.x86_64.rpm 
 6aa3cd35d549c1196922e8301f426db7  2009.1/SRPMS/gtk+2.0-2.16.1-4.1mdv2009.1.src.rpm

 Corporate 4.0:
 0ae2bde2a8110529a3264873d4286212  corporate/4.0/i586/gtk+2.0-2.8.3-4.4.20060mlcs4.i586.rpm
 767685aae1b2911d834d929471344fec  corporate/4.0/i586/libgdk_pixbuf2.0_0-2.8.3-4.4.20060mlcs4.i586.rpm
 4a9f22f438875e2f60daed8bc243adc4  corporate/4.0/i586/libgdk_pixbuf2.0_0-devel-2.8.3-4.4.20060mlcs4.i586.rpm
 1f7ef426ce7aeb211403debacb5e1d84  corporate/4.0/i586/libgtk+2.0_0-2.8.3-4.4.20060mlcs4.i586.rpm
 3a550de7eed2fec9c99757cfa66e2920  corporate/4.0/i586/libgtk+2.0_0-devel-2.8.3-4.4.20060mlcs4.i586.rpm
 84008c122de9aa323340bb295ed9e089  corporate/4.0/i586/libgtk+-x11-2.0_0-2.8.3-4.4.20060mlcs4.i586.rpm 
 622fba84b6f40c807e45f2ba8350e393  corporate/4.0/SRPMS/gtk+2.0-2.8.3-4.4.20060mlcs4.src.rpm

 Corporate 4.0/X86_64:
 e6c4ac5d0cc5c5096980f11f3048831e  corporate/4.0/x86_64/gtk+2.0-2.8.3-4.4.20060mlcs4.x86_64.rpm
 9e439be03915be4d385e844064de2bf0  corporate/4.0/x86_64/lib64gdk_pixbuf2.0_0-2.8.3-4.4.20060mlcs4.x86_64.rpm
 548d7bdadec30152cd8ed125332d8169  corporate/4.0/x86_64/lib64gdk_pixbuf2.0_0-devel-2.8.3-4.4.20060mlcs4.x86_64.rpm
 fcdf5eb7a865f6a26ba70947df20fb06  corporate/4.0/x86_64/lib64gtk+2.0_0-2.8.3-4.4.20060mlcs4.x86_64.rpm
 7f6ae0aab6b8c80af0396199f0865d3a  corporate/4.0/x86_64/lib64gtk+2.0_0-devel-2.8.3-4.4.20060mlcs4.x86_64.rpm
 1dc4c1312a013adbb66658a1327414ed  corporate/4.0/x86_64/lib64gtk+-x11-2.0_0-2.8.3-4.4.20060mlcs4.x86_64.rpm 
 622fba84b6f40c807e45f2ba8350e393  corporate/4.0/SRPMS/gtk+2.0-2.8.3-4.4.20060mlcs4.src.rpm

 Mandriva Enterprise Server 5:
 760ed4665a40b3fde0c15fa9d2692a1a  mes5/i586/gtk+2.0-2.14.3-2.1mdvmes5.1.i586.rpm
 890959e5def2126453e7d148979f69a4  mes5/i586/libgail18-2.14.3-2.1mdvmes5.1.i586.rpm
 a6d398c6f8880269107ef97d3cc1a539  mes5/i586/libgail-devel-2.14.3-2.1mdvmes5.1.i586.rpm
 5cea1edcdfa14f0feb895fc352c6f3e4  mes5/i586/libgdk_pixbuf2.0_0-2.14.3-2.1mdvmes5.1.i586.rpm
 7e700ed416c7429537dd3375d22d185e  mes5/i586/libgdk_pixbuf2.0_0-devel-2.14.3-2.1mdvmes5.1.i586.rpm
 6200d92b320fe8b3c16eeb35f5645651  mes5/i586/libgtk+2.0_0-2.14.3-2.1mdvmes5.1.i586.rpm
 8db1105ffa383ad54593805784b31283  mes5/i586/libgtk+2.0_0-devel-2.14.3-2.1mdvmes5.1.i586.rpm
 43b14eb35a4ab62fe51eb17d5b86a93b  mes5/i586/libgtk+-x11-2.0_0-2.14.3-2.1mdvmes5.1.i586.rpm 
 a657d365ff839ee3a2a0ebb72d290cdc  mes5/SRPMS/gtk+2.0-2.14.3-2.1mdvmes5.1.src.rpm

 Mandriva Enterprise Server 5/X86_64:
 e93453ce255fdae6f6d712b21e70bf9c  mes5/x86_64/gtk+2.0-2.14.3-2.1mdvmes5.1.x86_64.rpm
 b4694b5b1bc7234ec2605c742aa1106c  mes5/x86_64/lib64gail18-2.14.3-2.1mdvmes5.1.x86_64.rpm
 279970ee4c96b2fe22f0e7eb3a4d2aab  mes5/x86_64/lib64gail-devel-2.14.3-2.1mdvmes5.1.x86_64.rpm
 75b722930a354ac78629b186e49bacd3  mes5/x86_64/lib64gdk_pixbuf2.0_0-2.14.3-2.1mdvmes5.1.x86_64.rpm
 b7367c9e1204038a1ece45a8090b1c08  mes5/x86_64/lib64gdk_pixbuf2.0_0-devel-2.14.3-2.1mdvmes5.1.x86_64.rpm
 88f2b9c887f2a33c4d48119dfe71a888  mes5/x86_64/lib64gtk+2.0_0-2.14.3-2.1mdvmes5.1.x86_64.rpm
 e9eafb8ee40f13074ed6e4e1aca4c65c  mes5/x86_64/lib64gtk+2.0_0-devel-2.14.3-2.1mdvmes5.1.x86_64.rpm
 c9a3f5de6bb9a073a0e88ce3ee1ef5e6  mes5/x86_64/lib64gtk+-x11-2.0_0-2.14.3-2.1mdvmes5.1.x86_64.rpm 
 a657d365ff839ee3a2a0ebb72d290cdc  mes5/SRPMS/gtk+2.0-2.14.3-2.1mdvmes5.1.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFL/l6wmqjQ0CJFipgRArPEAKCjOMl44IdKwIYcOQDeJiW1xDwoegCeJ6Eo
oHX5TFkOzJlWesVZAPGxJKQ=
=UJoI
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ