Stay Secure with the Latest Linux Advisories

security advisorysecurity issuecritical

Slackware 12.0: 2009-086-02 Critical Update For Glib2 Overflow

New glib2 packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix overflows that may be security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] glib2 (SSA:2009-086-02) New glib2 packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix overflows that may be security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: https://www.cve.org/CVERecord?id=CVE-2008-4316 Here are the details from the Slackware 12.2 ChangeLog: +--------------------------+ patches/packages/glib2-2.16.6-i486-2_slack12.2.tgz: This library has been patched to fix overflows that are possible security holes. For more information, see: https://www.cve.org/CVERecord?id=CVE-2008-4316 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com. Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 12.0: ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/glib2-2.12.12-i486-2_slack12.0.tgz Updated package for Slackware 12.1: ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/glib2-2.14.6-i486-5_slack12.1.tgz Updated package for Slackware 12.2: ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/glib2-2.16.6-i486-2_slack12.2.tgz Updated package for Slackware -current: MD5 signatures: +-------------+ Slackware 12.0package: 84261839ea98ac522055b65d7e9bc606 glib2-2.12.12-i486-2_slack12.0.tgz Slackware 12.1 package: a9df347691fef98582c20b56c85b10c3 glib2-2.14.6-i486-5_slack12.1.tgz Slackware 12.2 package: 5e4f04dd315c8ba597f9f73bf0a37b3e glib2-2.16.6-i486-2_slack12.2.tgz Slackware -current package: f4067116de6091aecd925872db32272c glib2-2.18.4-i486-1.tgz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg glib2-2.16.6-i486-2_slack12.2.tgz +-----+ . Freshly released glib2 updates for Slackware tackle buffer overflows that may pose security risks. Recommendations for upgrading included within.. glib2 packages, Slackware updates, overflow fix. . Severity: Critical. LinuxSecurity.com Team

Mar 28, 2009 •Critical Slackware