Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 10: glib2 Update 2.18.4-2 Critical: Integer Overflow Fix

fedora
Calendar Grey April 24, 2009
Dist Fedora Esm H88
Essential update for fixing integer overflows in glib2's base64 handling. Critical for Fedora 10 systems.
This update fixes possible integer overflows in the base64 handling code

Summary

GLib is the low-level core library that forms the basis

for projects such as GTK+ and GNOME. It provides data structure

handling for C, portability wrappers, and interfaces for such runtime

functionality as an event loop, threads, dynamic loading, and an

object system.

This package provides version 2 of GLib.

Update Information:

This update fixes possible integer overflows in the base64 handling code. This has been reported in CVE-2008-4316.

Change Log

* Thu Mar 12 2009 Matthias Clasen - 2.18.4-2 - Fix integer overflows in the base64 handling functions. CVE-2008-4316 * Fri Jan 9 2009 Matthias Clasen - 2.18.4-1 - Update to 2.18.4 * Mon Nov 24 2008 Matthias Clasen - 2.18.3-2 - Update to 2.18.3

References


[ 1 ] Bug #474770 - CVE-2008-4316 glib2: integer overflows in the base64 handling functions (oCERT-2008-015) https://bugzilla.redhat.com/show_bug.cgi?id=474770

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update glib2' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: glib2
Product: Fedora 10
Version: 2.18.4
Release: 2.fc10
Summary: A library of handy utility functions

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here