-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[sflack-security] gd (SFSA:2007-178-01)
GD is an open source code library for the dynamic creation of images.
New gd packages are available for Sflack 11.0, and -current to
fix possible security issues.
Please see: http://www.libgd.org/ReleaseNote020035
for complete release notes. "Upgrading is strongly recommended."
Here are the details from the Sflack 11.0 ChangeLog:
+--------------------------+
patches/packages/gd-2.0.35-x86_64-1_sflack11.0.tgz:
Upgraded to gd-2.0.35.
This fixes a few possible security issues:
* Possible infinite loop in the PNG reader
* Possible integer overflow in gdImageCreateTrueColor
* Possible crash in gdImageCreateXbm
* Numerous flaws in the GIF reader
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
Thanks to the friendly folks at Evolva Telecom
(http://evolva.ro) and serghei.net (http://serghei.net)
for donating additional FTP and rsync hosting
to the Sflack project! :-)
Also see the "Get Sflack" section on http://sflack.com for
additional mirror sites near you.
Updated package for Sflack 11.0:
ftp://ftp.sflack.com/pub/sflack/sflack-11.0/patches/packages/gd-2.0.35-x86_64-1_sflack11.0.tgz
Updated package for Sflack -current:
ftp://ftp.sflack.com/pub/sflack/sflack-current/slackware/l/gd-2.0.35-x86_64-1.tgz
MD5 signatures:
+-------------+
Sflack 11.0 package:
f042ca6f3ac44f567195d0e1b8fe7cca gd-2.0.35-x86_64-1_sflack11.0.tgz
Sflack -current package:
cccba4332da605cb9c197d367e3fadc2 gd-2.0.35-x86_64-1.tgz
Installation instructions:
+------------------------+
Upgrade the package as root:
# upgradepkg gd-2.0.35-x86_64-1_sflack11.0.tgz
+-----+
Sflack Linux Security Team
http://sflack.com/gpg-key
security at sflack.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
iD8DBQFGgrgCw79R6/xskD8RAgO/AJ9RU7u3TLc8JXdKKjtCrOknUIdFTwCeLiVk
ULz1om0RZFNpVMMB/o/8e00=
=PiEM
-----END PGP SIGNATURE-----
Correlati
