-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 --------------------------------------------------------------------------
   Turbolinux Security Advisory TLSA-2005-57
   http://www.turbolinux.co.jp/security/
                                             security-team@turbolinux.co.jp
 --------------------------------------------------------------------------

 Original released date: 16 May 2005
 Last revised: 16 May 2005

 Package: gdk-pixbuf

 Summary: Double-free vulnerability

 More information:
    The gdk-pixbuf library provides procedures for image manipulation.

    Double-free vulnerabilities exist in gdk-pixbuf.

 Impact:
    This vulnerability may allow a remote attacker to cause a denial of service
    via crafted BMP image files.

 Affected Products:
    - Turbolinux 10 Server
    - Turbolinux Home
    - Turbolinux 10 F...
    - Turbolinux 10 Desktop

 Solution:
    Please use the turbopkg (zabom) tool to apply the update. 
 ---------------------------------------------
 # turbopkg
 or
 # zabom -u gdk-pixbuf gdk-pixbuf-devel
 ---------------------------------------------


 <Turbolinux 10 Server>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/SRPMS/gdk-pixbuf-0.22.0-6.src.rpm
       410855 533914979cba7693ac9f00e272679d09

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/gdk-pixbuf-0.22.0-6.i586.rpm
       187643 9800530f8f7c91696fec7c836779eac5
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/RPMS/gdk-pixbuf-devel-0.22.0-6.i586.rpm
       149187 8bad32ea487061b65d157bb83b3dee7b

 <Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home>

   Source Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/SRPMS/gdk-pixbuf-0.22.0-6.src.rpm
       410855 acf8013f47b8b56388685232a6c1cac6

   Binary Packages
   Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/gdk-pixbuf-0.22.0-6.i586.rpm
       188164 d02385ee2f244ce29437a19f460acb42
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/gdk-pixbuf-devel-0.22.0-6.i586.rpm
       149072 aa91243c1fb3ea88f1726e69f3312838


 References:

 CVE
   [CAN-2005-0891]
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0891

 --------------------------------------------------------------------------
 Revision History
    16 May 2005 Initial release
 --------------------------------------------------------------------------

 Copyright(C) 2005 Turbolinux, Inc. All rights reserved. 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.7 (GNU/Linux)

iD8DBQFCiFoZK0LzjOqIJMwRAuVDAJ92jEF9D+GUCdnDk5uxyf8G2+68cQCbBHuA
S4Z25AFAqnup9jkiTjDxK20=
=mZCV
-----END PGP SIGNATURE-----