Synopsis

Moderate: gtk2 security update

Type/Severity

Security Advisory: Moderate

Topic

Updated gtk2 packages that fix a security issue are now available.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

The gtk2 package contains the GIMP ToolKit (GTK+), a library for creating
graphical user interfaces for the X Window System.

A bug was found in the way the gtk2 GdkPixbufLoader() function processed
invalid input. Applications linked against gtk2 could crash if they
loaded a malformed image file. (CVE-2007-0010)

Users of gtk2 are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 218932 - CVE-2007-0010 GdbPixbufLoader fails to handle invalid input from Evolution correctly

CVEs

• CVE-2007-0010

References

• http://www.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux Server 4

SRPM
gtk2-2.4.13-22.src.rpm	SHA-256: d4dbcdc3c660a24b269ea2569139d7686819849099e9dda70634c7c509b17e67
x86_64
gtk2-2.4.13-22.i386.rpm	SHA-256: 5cf9770f4c1b9a4b52ca76a826e96cd857ce89bd61cd8618d856edab65b0e9e5
gtk2-2.4.13-22.i386.rpm	SHA-256: 5cf9770f4c1b9a4b52ca76a826e96cd857ce89bd61cd8618d856edab65b0e9e5
gtk2-2.4.13-22.x86_64.rpm	SHA-256: a7c03a0522b87d02430e679bfc38fd5988f24b7b0b4b296ebdb28aa8f1cfed2f
gtk2-2.4.13-22.x86_64.rpm	SHA-256: a7c03a0522b87d02430e679bfc38fd5988f24b7b0b4b296ebdb28aa8f1cfed2f
gtk2-devel-2.4.13-22.x86_64.rpm	SHA-256: 973b18812fde60d7852b00cf34e0b36555671a02828c8749b8e4c2af112f3240
gtk2-devel-2.4.13-22.x86_64.rpm	SHA-256: 973b18812fde60d7852b00cf34e0b36555671a02828c8749b8e4c2af112f3240
ia64
gtk2-2.4.13-22.i386.rpm	SHA-256: 5cf9770f4c1b9a4b52ca76a826e96cd857ce89bd61cd8618d856edab65b0e9e5
gtk2-2.4.13-22.i386.rpm	SHA-256: 5cf9770f4c1b9a4b52ca76a826e96cd857ce89bd61cd8618d856edab65b0e9e5
gtk2-2.4.13-22.ia64.rpm	SHA-256: 6766cc781f0b2feaeb3857937b06cf9f14fa355568529cc87fdf88342dbc4274
gtk2-2.4.13-22.ia64.rpm	SHA-256: 6766cc781f0b2feaeb3857937b06cf9f14fa355568529cc87fdf88342dbc4274
gtk2-devel-2.4.13-22.ia64.rpm	SHA-256: 1b0aedc34e78cd8859f39d61100f66ee08d584ac9e888e0edb3d5cacf3451193
gtk2-devel-2.4.13-22.ia64.rpm	SHA-256: 1b0aedc34e78cd8859f39d61100f66ee08d584ac9e888e0edb3d5cacf3451193
i386
gtk2-2.4.13-22.i386.rpm	SHA-256: 5cf9770f4c1b9a4b52ca76a826e96cd857ce89bd61cd8618d856edab65b0e9e5
gtk2-2.4.13-22.i386.rpm	SHA-256: 5cf9770f4c1b9a4b52ca76a826e96cd857ce89bd61cd8618d856edab65b0e9e5
gtk2-devel-2.4.13-22.i386.rpm	SHA-256: f314d42952bd61238ba73297460b030a49b75217a852b0f842df1ef6babb87dd
gtk2-devel-2.4.13-22.i386.rpm	SHA-256: f314d42952bd61238ba73297460b030a49b75217a852b0f842df1ef6babb87dd

Red Hat Enterprise Linux Workstation 4

SRPM
gtk2-2.4.13-22.src.rpm	SHA-256: d4dbcdc3c660a24b269ea2569139d7686819849099e9dda70634c7c509b17e67
x86_64
gtk2-2.4.13-22.i386.rpm	SHA-256: 5cf9770f4c1b9a4b52ca76a826e96cd857ce89bd61cd8618d856edab65b0e9e5
gtk2-2.4.13-22.x86_64.rpm	SHA-256: a7c03a0522b87d02430e679bfc38fd5988f24b7b0b4b296ebdb28aa8f1cfed2f
gtk2-devel-2.4.13-22.x86_64.rpm	SHA-256: 973b18812fde60d7852b00cf34e0b36555671a02828c8749b8e4c2af112f3240
ia64
gtk2-2.4.13-22.i386.rpm	SHA-256: 5cf9770f4c1b9a4b52ca76a826e96cd857ce89bd61cd8618d856edab65b0e9e5
gtk2-2.4.13-22.ia64.rpm	SHA-256: 6766cc781f0b2feaeb3857937b06cf9f14fa355568529cc87fdf88342dbc4274
gtk2-devel-2.4.13-22.ia64.rpm	SHA-256: 1b0aedc34e78cd8859f39d61100f66ee08d584ac9e888e0edb3d5cacf3451193
i386
gtk2-2.4.13-22.i386.rpm	SHA-256: 5cf9770f4c1b9a4b52ca76a826e96cd857ce89bd61cd8618d856edab65b0e9e5
gtk2-devel-2.4.13-22.i386.rpm	SHA-256: f314d42952bd61238ba73297460b030a49b75217a852b0f842df1ef6babb87dd

Red Hat Enterprise Linux Desktop 4

SRPM
gtk2-2.4.13-22.src.rpm	SHA-256: d4dbcdc3c660a24b269ea2569139d7686819849099e9dda70634c7c509b17e67
x86_64
gtk2-2.4.13-22.i386.rpm	SHA-256: 5cf9770f4c1b9a4b52ca76a826e96cd857ce89bd61cd8618d856edab65b0e9e5
gtk2-2.4.13-22.x86_64.rpm	SHA-256: a7c03a0522b87d02430e679bfc38fd5988f24b7b0b4b296ebdb28aa8f1cfed2f
gtk2-devel-2.4.13-22.x86_64.rpm	SHA-256: 973b18812fde60d7852b00cf34e0b36555671a02828c8749b8e4c2af112f3240
i386
gtk2-2.4.13-22.i386.rpm	SHA-256: 5cf9770f4c1b9a4b52ca76a826e96cd857ce89bd61cd8618d856edab65b0e9e5
gtk2-devel-2.4.13-22.i386.rpm	SHA-256: f314d42952bd61238ba73297460b030a49b75217a852b0f842df1ef6babb87dd

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
gtk2-2.4.13-22.src.rpm	SHA-256: d4dbcdc3c660a24b269ea2569139d7686819849099e9dda70634c7c509b17e67
s390x
gtk2-2.4.13-22.s390.rpm	SHA-256: 5d977a34ca34435bb5af793adba1a9b647b76b919566ed38c6da349cb50266b8
gtk2-2.4.13-22.s390x.rpm	SHA-256: e87b0a10df7a5b76f1fd3acc6c63c7d749bc61b4ce744a7d4edc7a8ef8b77443
gtk2-devel-2.4.13-22.s390x.rpm	SHA-256: 257b12a9ed61dcb73e8fd0ecd60521ef13c4348753663554563f759bd45c8d88
s390
gtk2-2.4.13-22.s390.rpm	SHA-256: 5d977a34ca34435bb5af793adba1a9b647b76b919566ed38c6da349cb50266b8
gtk2-devel-2.4.13-22.s390.rpm	SHA-256: 74728d742f2348d1554bdb0e1a21861802e16435915afa7c96efa734c0fa4d01

Red Hat Enterprise Linux for Power, big endian 4

SRPM
gtk2-2.4.13-22.src.rpm	SHA-256: d4dbcdc3c660a24b269ea2569139d7686819849099e9dda70634c7c509b17e67
ppc
gtk2-2.4.13-22.ppc.rpm	SHA-256: cb53b449398d724b97ea9bcade275801771d32b2dc6cf998ee0892d52dd03fe3
gtk2-2.4.13-22.ppc64.rpm	SHA-256: 68cde373183ed02ca322e9e4d4eecb8d0aa9be35b62ab098a8a1924fc695cc6d
gtk2-devel-2.4.13-22.ppc.rpm	SHA-256: 31be75aaf95fd4cce8751052ffda8a93f7c497a39a873255dc8c769c8e444373