Menu
▾
▴
[Cucumber-linux-security] gdk-pixbuf (security update is available)
|
From: Z5T1 <z5...@z5...> - 2017-09-05 22:16:04
|
Update Information A security update is available for gdk-pixbuf for the following versions of Cucumber Linux: * 1.0 Here are the details from the Cucumber 1.0 changelog: +----------------+ Tue Sep 5 17:41:38 EDT 2017 x-base/gdk-pixbuf upgraded from 2.36.2 to 2.36.9 to fix CVE-2017-2862 and CVE-2017-2870, two heap overflow vulnerabilities that could allow arbitrary code execution via a specially crafted file or URL. For more information see: http://security.cucumberlinux.com/security/details.php?id=10 http://security.cucumberlinux.com/security/details.php?id=11 https://nvd.nist.gov/vuln/detail/CVE-2017-2862 https://nvd.nist.gov/vuln/detail/CVE-2017-2870 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0366 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0377 multilib/x-base/gdk-pixbuf-lib_i686 upgraded from 2.36.2 to 2.36.9 (x86_64 only) * SECURITY FIX * +----------------+ ------------------------------------------------------------------------ CLD Information This update is associated with the following Cucumber Linux Deficiency (CLD) numbers: * CLD-10 (http://security.cucumberlinux.com/security/details.php?id=10) * CLD-11 (http://security.cucumberlinux.com/security/details.php?id=11) More information about these CLDs can be found at their respective pages on the Cucumber Linux Security Advisory Tracker (these are the URLs in parenthesis above). ------------------------------------------------------------------------ Installing the Update The updated package can be installed via Pickle by running the following commands (as root): # pickle --update # pickle Make sure gdk-pixbuf is selected on the update list, and then select Ok. Pickle will then install the updated package. If you prefer to download the updated package manually, it can be found at the following location: Cucumber 1.0 i686: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0/cucumber-i686/x-base/gdk-pixbuf-2.36.9-i686-1.txz Cucumber 1.0 x86_64: http://mirror.cucumberlinux.com/cucumber/cucumber-1.0/cucumber-x86_64/x-base/gdk-pixbuf-2.36.9-x86_64-1.txz http://mirror.cucumberlinux.com/cucumber/cucumber-1.0/cucumber-x86_64/multilib/x-base/gdk-pixbuf-lib_i686-2.36.9-lib_i686-1.txz To upgrade the package manually, download the new package and run the following command (as root): # upgradepkg gdk-pixbuf-2.36.9-i686-1.txz ------------------------------------------------------------------------ The Cucumber Linux Security Team cuc...@li... http://www.cucumberlinux.com/security.php |
