[ MDVSA-2009:204 ] wxgtk

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

---

Mandriva Linux Security Advisory MDVSA-2009:204
http://www.mandriva.com/security/

---

Package : wxgtk
Date : August 16, 2009
Affected: 2008.1, 2009.0, 2009.1, Corporate 4.0, Enterprise Server 5.0

---

Problem Description:

A vulnerability has been found and corrected in wxgtk:

Integer overflow in the wxImage::Create function in
src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause
a denial of service (crash) and possibly execute arbitrary code via
a crafted JPEG file, which triggers a heap-based buffer overflow.
NOTE: the provenance of this information is unknown; the details are
obtained solely from third party information (CVE-2009-2369).

This update provides a solution to this vulnerability.

---

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2369

---

Updated Packages:

Mandriva Linux 2008.1:
9dc6e8e719baf1d987f97bbde60712de 2008.1/i586/libwxgtk2.6-2.6.4-14.1mdv2008.1.i586.rpm
f23c5030971ed93b3c74b879ebbb3b8b 2008.1/i586/libwxgtk2.6-devel-2.6.4-14.1mdv2008.1.i586.rpm
7cf2e7531b37fc6bc28a791a095d487f 2008.1/i586/libwxgtk2.8-2.8.7-1.1mdv2008.1.i586.rpm
08620a61436b7199be2be7a9399a34bd 2008.1/i586/libwxgtk2.8-devel-2.8.7-1.1mdv2008.1.i586.rpm
891255432a74d7d58aeb026a1d3b4109 2008.1/i586/libwxgtkgl2.6-2.6.4-14.1mdv2008.1.i586.rpm
a396ce4233ad2bae3d4a134abe732645 2008.1/i586/libwxgtkgl2.8-2.8.7-1.1mdv2008.1.i586.rpm
5d2773bb963bf098176a4a8dc60d365d 2008.1/i586/libwxgtkglu2.6-2.6.4-14.1mdv2008.1.i586.rpm
48bbf610793fa67426aca1299a9a164b 2008.1/i586/libwxgtkglu2.8-2.8.7-1.1mdv2008.1.i586.rpm
c4714e02fa1513936752b8aa7f19a808 2008.1/i586/libwxgtku2.6-2.6.4-14.1mdv2008.1.i586.rpm
ff783e25a50136dc6d3eeb68408ea30b 2008.1/i586/libwxgtku2.6-devel-2.6.4-14.1mdv2008.1.i586.rpm
e99b37d7d2e75aa6f258e4c6b27a9722 2008.1/i586/libwxgtku2.8-2.8.7-1.1mdv2008.1.i586.rpm
c5ed76e85ce79e03d353abccbbffbe30 2008.1/i586/libwxgtku2.8-devel-2.8.7-1.1mdv2008.1.i586.rpm
7d076f5552f8b24410d5e59d138f63bd 2008.1/i586/wxGTK2.6-2.6.4-14.1mdv2008.1.i586.rpm
08d35eef3c6dd8abaa2956f8a87ebae2 2008.1/i586/wxgtk2.8-2.8.7-1.1mdv2008.1.i586.rpm
465ff3df30f3bc8dd91e9b906b38158c 2008.1/SRPMS/wxGTK2.6-2.6.4-14.1mdv2008.1.src.rpm
9c40827bf45e99abcd306b69ee98b9ff 2008.1/SRPMS/wxgtk2.8-2.8.7-1.1mdv2008.1.src.rpm

Mandriva Linux 2008.1/X86_64:
69e18858e88cdc6f7422d05164285cf0 2008.1/x86_64/lib64wxgtk2.6-2.6.4-14.1mdv2008.1.x86_64.rpm
ad79430e27c6bcc118dac5ef82b4ed77 2008.1/x86_64/lib64wxgtk2.6-devel-2.6.4-14.1mdv2008.1.x86_64.rpm
26281d0605bab2d2a29693a5192129f9 2008.1/x86_64/lib64wxgtk2.8-2.8.7-1.1mdv2008.1.x86_64.rpm
2402b86fc51ad984a0e8e8d9467003dd 2008.1/x86_64/lib64wxgtk2.8-devel-2.8.7-1.1mdv2008.1.x86_64.rpm
2b43e583b20a4de1b41e62f9523e2d26 2008.1/x86_64/lib64wxgtkgl2.6-2.6.4-14.1mdv2008.1.x86_64.rpm
1f76056cc2107e72f67402879513279f 2008.1/x86_64/lib64wxgtkgl2.8-2.8.7-1.1mdv2008.1.x86_64.rpm
5025b73502e69b720f8ccb0dce5fcd90 2008.1/x86_64/lib64wxgtkglu2.6-2.6.4-14.1mdv2008.1.x86_64.rpm
8defd7f0ea46c1c503a040c0c1448f2b 2008.1/x86_64/lib64wxgtkglu2.8-2.8.7-1.1mdv2008.1.x86_64.rpm
5c3fecbd0883787eb696bc61553175fc 2008.1/x86_64/lib64wxgtku2.6-2.6.4-14.1mdv2008.1.x86_64.rpm
fe57d33c500a5f7996fa8bccf1dbc12b 2008.1/x86_64/lib64wxgtku2.6-devel-2.6.4-14.1mdv2008.1.x86_64.rpm
dd9063c83d389c68809bdd6a7647bf32 2008.1/x86_64/lib64wxgtku2.8-2.8.7-1.1mdv2008.1.x86_64.rpm
88fa100cb6e5974ca54de295f6bea515 2008.1/x86_64/lib64wxgtku2.8-devel-2.8.7-1.1mdv2008.1.x86_64.rpm
0f38542b20b1d098d98ba01ac16d6f1e 2008.1/x86_64/wxGTK2.6-2.6.4-14.1mdv2008.1.x86_64.rpm
6283212ea1ad0f35d2319e22c64b9019 2008.1/x86_64/wxgtk2.8-2.8.7-1.1mdv2008.1.x86_64.rpm
465ff3df30f3bc8dd91e9b906b38158c 2008.1/SRPMS/wxGTK2.6-2.6.4-14.1mdv2008.1.src.rpm
9c40827bf45e99abcd306b69ee98b9ff 2008.1/SRPMS/wxgtk2.8-2.8.7-1.1mdv2008.1.src.rpm

Mandriva Linux 2009.0:
fd90e9d6aad6676c8584a88f0d2bc814 2009.0/i586/libwxgtk2.6-2.6.4-16.1mdv2009.0.i586.rpm
f7092574561340ac0feee731e68370a3 2009.0/i586/libwxgtk2.6-devel-2.6.4-16.1mdv2009.0.i586.rpm
2653b9edb82077d99ca6adb545aa33f8 2009.0/i586/libwxgtk2.8-2.8.8-1.1mdv2009.0.i586.rpm
9115da0da60f9d56cd7dd4114a185a10 2009.0/i586/libwxgtk2.8-devel-2.8.8-1.1mdv2009.0.i586.rpm
356d92dfa46d5a07cb78a9bc472de066 2009.0/i586/libwxgtkgl2.6-2.6.4-16.1mdv2009.0.i586.rpm
fc14ae9b9eb4cfe94b1c5affafd81585 2009.0/i586/libwxgtkgl2.8-2.8.8-1.1mdv2009.0.i586.rpm
c539553f6e8d15fa555b5e1c70fc317d 2009.0/i586/libwxgtkglu2.6-2.6.4-16.1mdv2009.0.i586.rpm
28cc63d000b8afd5332a7ce02e755656 2009.0/i586/libwxgtkglu2.8-2.8.8-1.1mdv2009.0.i586.rpm
9d6eaf37c2c5f645f14881080e369160 2009.0/i586/libwxgtku2.6-2.6.4-16.1mdv2009.0.i586.rpm
0f91c80b3ce77f51d4c1f5d36e0819f4 2009.0/i586/libwxgtku2.6-devel-2.6.4-16.1mdv2009.0.i586.rpm
ff86706ea654ea7a468d6363dda6feab 2009.0/i586/libwxgtku2.8-2.8.8-1.1mdv2009.0.i586.rpm
8c68a793d4c2d757433eea4e77a60f55 2009.0/i586/libwxgtku2.8-devel-2.8.8-1.1mdv2009.0.i586.rpm
f8a1e00d8b94a7db2609d8a71462f0df 2009.0/i586/wxGTK2.6-2.6.4-16.1mdv2009.0.i586.rpm
de0c1a62f4cf70af914191defdc7f76e 2009.0/i586/wxgtk2.8-2.8.8-1.1mdv2009.0.i586.rpm
e930a36288bf2ff3b8aca22399863eba 2009.0/SRPMS/wxGTK2.6-2.6.4-16.1mdv2009.0.src.rpm
6bde57c053c58878704038b21c2d1676 2009.0/SRPMS/wxgtk2.8-2.8.8-1.1mdv2009.0.src.rpm

Mandriva Linux 2009.0/X86_64:
cb965c0dddbe7b7e303ad0b5ebde0cc9 2009.0/x86_64/lib64wxgtk2.6-2.6.4-16.1mdv2009.0.x86_64.rpm
af54a23998cd6c032fa48f81c228c175 2009.0/x86_64/lib64wxgtk2.6-devel-2.6.4-16.1mdv2009.0.x86_64.rpm
544d87b36b2a6f99f4435bbb9a7cb2c0 2009.0/x86_64/lib64wxgtk2.8-2.8.8-1.1mdv2009.0.x86_64.rpm
43f5f90dc44adc7d23831eb428501484 2009.0/x86_64/lib64wxgtk2.8-devel-2.8.8-1.1mdv2009.0.x86_64.rpm
561630fdbd6989c87912194b2c0777d1 2009.0/x86_64/lib64wxgtkgl2.6-2.6.4-16.1mdv2009.0.x86_64.rpm
4262b7dc3e62e814e2f31af892d1e7d3 2009.0/x86_64/lib64wxgtkgl2.8-2.8.8-1.1mdv2009.0.x86_64.rpm
587512fe0e20bda8f15941f298398fcd 2009.0/x86_64/lib64wxgtkglu2.6-2.6.4-16.1mdv2009.0.x86_64.rpm
fcea1308febc43a1e63798d483aa9b32 2009.0/x86_64/lib64wxgtkglu2.8-2.8.8-1.1mdv2009.0.x86_64.rpm
c5322379be157f028733dd0409f5f1b0 2009.0/x86_64/lib64wxgtku2.6-2.6.4-16.1mdv2009.0.x86_64.rpm
c0f8976fd1ea4753fbb35d057f7f6790 2009.0/x86_64/lib64wxgtku2.6-devel-2.6.4-16.1mdv2009.0.x86_64.rpm
a1a75543ff88ba2077ff8e97d85bb649 2009.0/x86_64/lib64wxgtku2.8-2.8.8-1.1mdv2009.0.x86_64.rpm
36ab506bcf29555c832026ef8b14d98c 2009.0/x86_64/lib64wxgtku2.8-devel-2.8.8-1.1mdv2009.0.x86_64.rpm
6d6ac31a5dece6e11bf0b1270a539b97 2009.0/x86_64/wxGTK2.6-2.6.4-16.1mdv2009.0.x86_64.rpm
370573fa244efd69c2ca1313d8b39320 2009.0/x86_64/wxgtk2.8-2.8.8-1.1mdv2009.0.x86_64.rpm
e930a36288bf2ff3b8aca22399863eba 2009.0/SRPMS/wxGTK2.6-2.6.4-16.1mdv2009.0.src.rpm
6bde57c053c58878704038b21c2d1676 2009.0/SRPMS/wxgtk2.8-2.8.8-1.1mdv2009.0.src.rpm

Mandriva Linux 2009.1:
3979d52a3bd6ccf111f4a40b64ec5eea 2009.1/i586/libwxgtk2.8-2.8.9-3.1mdv2009.1.i586.rpm
d9d16a58951147f0888bb6a60b1e9d5a 2009.1/i586/libwxgtk2.8-devel-2.8.9-3.1mdv2009.1.i586.rpm
78bb27f22b501c2240edb0f82defe0a3 2009.1/i586/libwxgtkgl2.8-2.8.9-3.1mdv2009.1.i586.rpm
03cc02b50295a401f49021689439af76 2009.1/i586/libwxgtkglu2.8-2.8.9-3.1mdv2009.1.i586.rpm
db1398114cde348c62e3fb56752b17fe 2009.1/i586/libwxgtku2.8-2.8.9-3.1mdv2009.1.i586.rpm
69bceb618bee5154fc1be7ebed3c36cc 2009.1/i586/libwxgtku2.8-devel-2.8.9-3.1mdv2009.1.i586.rpm
328f826b7f8981ecbad53123547e3d86 2009.1/i586/wxgtk2.8-2.8.9-3.1mdv2009.1.i586.rpm
d845e40860f9222aa10525e0fdf77d49 2009.1/SRPMS/wxgtk2.8-2.8.9-3.1mdv2009.1.src.rpm

Mandriva Linux 2009.1/X86_64:
3ea359aa650974fe4eade365d7735d26 2009.1/x86_64/lib64wxgtk2.8-2.8.9-3.1mdv2009.1.x86_64.rpm
0b521987ee5a1374e409a1cc480fe9ce 2009.1/x86_64/lib64wxgtk2.8-devel-2.8.9-3.1mdv2009.1.x86_64.rpm
9782e47812d647a3ee0ad8ab7a334a3a 2009.1/x86_64/lib64wxgtkgl2.8-2.8.9-3.1mdv2009.1.x86_64.rpm
837559e31c0e56ef10c722439cf911c3 2009.1/x86_64/lib64wxgtkglu2.8-2.8.9-3.1mdv2009.1.x86_64.rpm
0b92147cce6dedf0389f105648444c2a 2009.1/x86_64/lib64wxgtku2.8-2.8.9-3.1mdv2009.1.x86_64.rpm
2a29085953161be80ecf2a3b5c69352b 2009.1/x86_64/lib64wxgtku2.8-devel-2.8.9-3.1mdv2009.1.x86_64.rpm
ec4d61fc4898e4786f418c3e13d84fb8 2009.1/x86_64/wxgtk2.8-2.8.9-3.1mdv2009.1.x86_64.rpm
d845e40860f9222aa10525e0fdf77d49 2009.1/SRPMS/wxgtk2.8-2.8.9-3.1mdv2009.1.src.rpm

Corporate 4.0:
dc4c6e0a79098643d963619b60e7cd9e corporate/4.0/i586/libwxgtk2.6-2.6.1-1.1.20060mlcs4.i586.rpm
e205de34a2ec8bb2ef63133e01e17608 corporate/4.0/i586/libwxgtk2.6-devel-2.6.1-1.1.20060mlcs4.i586.rpm
8c7ae887633a1c98883321a54fa3ca14 corporate/4.0/i586/libwxgtkgl2.6-2.6.1-1.1.20060mlcs4.i586.rpm
da12877bb22222c307a15b93808aad2c corporate/4.0/i586/libwxgtkglu2.6-2.6.1-1.1.20060mlcs4.i586.rpm
fe783f2a999f1ad7bd7523d39f4b5685 corporate/4.0/i586/libwxgtku2.6-2.6.1-1.1.20060mlcs4.i586.rpm
ec16a26ad50a9d2b9c5743ae5fac7cae corporate/4.0/i586/libwxgtku2.6-devel-2.6.1-1.1.20060mlcs4.i586.rpm
056219b0008826fa1ac1696d1f4ff432 corporate/4.0/i586/wxGTK2.6-2.6.1-1.1.20060mlcs4.i586.rpm
8d8b3aba0a3e22d707f28cb9f8608ef4 corporate/4.0/SRPMS/wxGTK2.6-2.6.1-1.1.20060mlcs4.src.rpm

Corporate 4.0/X86_64:
32e416f12f857045a2745d61b3f90f5d corporate/4.0/x86_64/lib64wxgtk2.6-2.6.1-1.1.20060mlcs4.x86_64.rpm
861a866b3c5aa376930190e9046e4eb3 corporate/4.0/x86_64/lib64wxgtk2.6-devel-2.6.1-1.1.20060mlcs4.x86_64.rpm
77f2d6060c1eb83e06533537984d194b corporate/4.0/x86_64/lib64wxgtkgl2.6-2.6.1-1.1.20060mlcs4.x86_64.rpm
be0a40d1a42feb11f1186b43d5c24e6d corporate/4.0/x86_64/lib64wxgtkglu2.6-2.6.1-1.1.20060mlcs4.x86_64.rpm
61b49d21b5da866d3e85626073f102b9 corporate/4.0/x86_64/lib64wxgtku2.6-2.6.1-1.1.20060mlcs4.x86_64.rpm
ab88d380ffd073f308b155066fb85523 corporate/4.0/x86_64/lib64wxgtku2.6-devel-2.6.1-1.1.20060mlcs4.x86_64.rpm
35f808f8cd59723580659ceb2ff81800 corporate/4.0/x86_64/wxGTK2.6-2.6.1-1.1.20060mlcs4.x86_64.rpm
8d8b3aba0a3e22d707f28cb9f8608ef4 corporate/4.0/SRPMS/wxGTK2.6-2.6.1-1.1.20060mlcs4.src.rpm

Mandriva Enterprise Server 5:
b9949389f8c2f255f7c08d4deee8a205 mes5/i586/libwxgtk2.8-2.8.8-1.1mdvmes5.i586.rpm
62e01f7fac4ddcad704dcc44d8a20f18 mes5/i586/libwxgtk2.8-devel-2.8.8-1.1mdvmes5.i586.rpm
ac213b138398076f018d0c3f22138d26 mes5/i586/libwxgtkgl2.8-2.8.8-1.1mdvmes5.i586.rpm
1007cc1c288d2dd0ea49a11a69314744 mes5/i586/libwxgtkglu2.8-2.8.8-1.1mdvmes5.i586.rpm
55ca51004e86b7393efe71e21a1cbc4b mes5/i586/libwxgtku2.8-2.8.8-1.1mdvmes5.i586.rpm
76ad64e12a1785e5344003ad93262dbb mes5/i586/libwxgtku2.8-devel-2.8.8-1.1mdvmes5.i586.rpm
26fa6078f737e69ab3024047c1591a4a mes5/i586/wxgtk2.8-2.8.8-1.1mdvmes5.i586.rpm
8d25aab35d794053627efec49dc73b50 mes5/SRPMS/wxgtk2.8-2.8.8-1.1mdvmes5.src.rpm

Mandriva Enterprise Server 5/X86_64:
685a0e502184adff3ebb251eb0f65d7f mes5/x86_64/lib64wxgtk2.8-2.8.8-1.1mdvmes5.x86_64.rpm
461ec9738183f7474f3765aefddff47e mes5/x86_64/lib64wxgtk2.8-devel-2.8.8-1.1mdvmes5.x86_64.rpm
78c67aaacdf55179d499fbba0b742de0 mes5/x86_64/lib64wxgtkgl2.8-2.8.8-1.1mdvmes5.x86_64.rpm
88ed2a84aeed286a2e6234e7740d5fd3 mes5/x86_64/lib64wxgtkglu2.8-2.8.8-1.1mdvmes5.x86_64.rpm
f40bcaac3f32956e83d85ed7ba318c79 mes5/x86_64/lib64wxgtku2.8-2.8.8-1.1mdvmes5.x86_64.rpm
4087d948db042660433e8f231b893b42 mes5/x86_64/lib64wxgtku2.8-devel-2.8.8-1.1mdvmes5.x86_64.rpm
1566dd6943961d3e43027716539ba072 mes5/x86_64/wxgtk2.8-2.8.8-1.1mdvmes5.x86_64.rpm
8d25aab35d794053627efec49dc73b50 mes5/SRPMS/wxgtk2.8-2.8.8-1.1mdvmes5.src.rpm

---

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com

---

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFKiHKwmqjQ0CJFipgRApvpAKDOu03RiPsa87evchns6DdzX4qznQCfYKbn
aNUc9rmakeIt34fk4FfpC4Y=
=Pna2
-----END PGP SIGNATURE-----