Skip to Content.
Sympa Menu

sm-security - [SM-Security] libXpm vulnerabilities

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Thomas Houssin <thomas.houssin AT gmail.com>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] libXpm vulnerabilities
  • Date: Sun, 01 May 2005 06:19:35 +0200

Thomas Houssin wrote:
> A new vulnerability has been discovered in libXpm. It may allow
> attackers to execute arbitrary code via a negative bitmap_unit value
> that leads to a buffer overflow :
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0605
>
> Updated packages for X.org and lesstif are now in grimoires.
>

Several vulnerabilities fixed in openmotif too, in devel and test. It
will be integrated to stable if we don't have any bug report.

--
Thomas Houssin

Security Team Lead : Source Mage GNU/Linux http://www.sourcemage.org
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature



  • [SM-Security] libXpm vulnerabilities, Thomas Houssin, 05/01/2005

Archive powered by MHonArc 2.6.24.

Top of Page