Loic Minier wrote:
> The Redhat security advisory also fixes CVE-2005-2975, for which I see
> no entry in the Debian changelog, could you please investifate on this
> id and report whether gtk1 and gtk2 are affected for Debian?
The vulnerability matrix for Woody and Sarge (the entries are the line
numbers in io-xpm.c, where the vulnerable code is present):
Woody gtk2 Woody gdk-pixbuf Sarge gtk2 Sarge gdk-pixbuf
CVE-2005-2975 1170 284 1170 284
CVE-2005-2976 1317 413 ---- 413
CVE-2005-3186 1255 359 1256 359
Cheers,
Moritz
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]