Gentoo Linux
Gentoo Linux Security Advisory GLSA 200511-13
Severity: Normal
Title: Sylpheed, Sylpheed-Claws: Buffer overflow in LDIF
importer
Date: November 15, 2005
Bugs: #111853
ID: 200511-13
Synopsis
Sylpheed and Sylpheed-Claws contain a buffer overflow
vulnerability which may lead to the execution of arbitrary
code.
Background
Sylpheed is a lightweight email client and newsreader.
Sylpheed-Claws is a ‘bleeding edge’ version of Sylpheed. They both
support the import of address books in LDIF (Lightweight Directory
Interchange Format).
Affected packages
Package / Vulnerable / Unaffected
1 mail-client/sylpheed < 2.0.4 >= 2.0.4 2 mail-client/sylpheed-claws < 1.0.5-r1 >= 1.0.5-r1 ------------------------------------------------------------------- 2 affected packages on all of their supported architectures.
Description
Colin Leroy reported buffer overflow vulnerabilities in Sylpheed
and Sylpheed-Claws. The LDIF importer uses a fixed length buffer to
store data of variable length. Two similar problems exist also in
the Mutt and Pine addressbook importers of Sylpheed-Claws.
Impact
By convincing a user to import a specially-crafted LDIF file
into the address book, a remote attacker could cause the program to
crash, potentially allowing the execution of arbitrary code with
the privileges of the user running the software.
Workaround
There is no known workaround at this time.
Resolution
All Sylpheed users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/sylpheed-2.0.4"
All Sylpheed-Claws users should upgrade to the latest
version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/sylpheed-claws-1.0.5-r1"
References
[ 1 ] CVE-2005-3354
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3354
Availability
This GLSA and any updates to it are available for viewing at the
Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200511-13.xml
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or
alternatively, you may file a bug at http://bugs.gentoo.org.
License
Copyright 2005 Gentoo Foundation, Inc; referenced text belongs
to its owner(s).
The contents of this document are licensed under the Creative
Commons – Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.0
Gentoo Linux Security Advisory GLSA 200511-14
Severity: Normal
Title: GTK+ 2, GdkPixbuf: Multiple XPM decoding vulnerabilities
Date: November 16, 2005
Bugs: #112608
ID: 200511-14
Synopsis
The GdkPixbuf library, that is also included in GTK+ 2, contains
vulnerabilities that could lead to a Denial of Service or the
execution of arbitrary code.
Background
GTK+ (the GIMP Toolkit) is a toolkit for creating graphical user
interfaces. The GdkPixbuf library provides facilities for image
handling. It is available as a standalone library and also packaged
with GTK+ 2.
Affected packages
Package / Vulnerable / Unaffected
1 x11-libs/gtk+ < 2.8.6-r1 >= 2.8.6-r1 *>= 2.6.10-r1 < 2.0 2 media-libs/gdk-pixbuf < 0.22.0-r5 >= 0.22.0-r5 ------------------------------------------------------------------- 2 affected packages on all of their supported architectures.
Description
iDEFENSE reported a possible heap overflow in the XPM loader
(CVE-2005-3186). Upon further inspection, Ludwig Nussel discovered
two additional issues in the XPM processing functions : an integer
overflow (CVE-2005-2976) that affects only gdk-pixbuf, and an
infinite loop (CVE-2005-2975).
Impact
Using a specially crafted XPM image an attacker could cause an
affected application to enter an infinite loop or trigger the
overflows, potentially allowing the execution of arbitrary
code.
Workaround
There is no known workaround at this time.
Resolution
All GTK+ 2 users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose x11-libs/gtk+
All GdkPixbuf users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/gdk-pixbuf-0.22.0-r5"
References
[ 1 ] CVE-2005-2975
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2975
[ 2 ] CVE-2005-2976
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2976
[ 3 ] CVE-2005-3186
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3186
[ 4 ] iDefense Security Advisory 11.15.05
http://www.idefense.com/application/poi/display?id=339&type=vulnerabilities
Availability
This GLSA and any updates to it are available for viewing at the
Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-200511-14.xml
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or
alternatively, you may file a bug at http://bugs.gentoo.org.
License
Copyright 2005 Gentoo Foundation, Inc; referenced text belongs
to its owner(s).
The contents of this document are licensed under the Creative
Commons – Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.0
Mandriva Linux
Mandriva Linux Security Advisory MDKSA-2005:212
http://www.mandriva.com/security/
Package : egroupware
Date : November 16, 2005
Affected: Corporate 3.0
Problem Description:
Egroupware contains embedded copies of several php based
projects, including phpldapadmin and phpsysinfo.
Phpldapadmin before 0.9.6c allows remote attackers to gain
anonymous access to the LDAP server, even when disable_anon_bind is
set, via an HTTP request to login.php with the anonymous_bind
parameter set. (CAN-2005-2654)
Directory traversal vulnerability in welcome.php in phpLDAPadmin
0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via
a .. (dot dot) in the custom_welcome_page parameter.
(CAN-2005-2792)
PHP remote code injection vulnerability in welcome.php in
phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute
arbitrary PHP code via the custom_welcome_page parameter.
(CAN-2005-2793)
Maksymilian Arciemowicz discovered several cross site scripting
issues in phpsysinfo, a PHP based host information application.
(CAN-2005-0869, 0870)
Christopher Kunz discovered that local variables in phpsysinfo
get overwritten unconditionally and are trusted later, which could
lead to the inclusion of arbitrary files. (CAN-2005-3347)
Christopher Kunz discovered that user-supplied input in
phpsysinfo is used unsanitised, causing a HTTP Response splitting
problem. (CAN-2005-3348)
The updated packages have new versions of these subsystems to
correct these issues.
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2654
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2792
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2793
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0869
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0870
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-3347
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-3348
Updated Packages:
Corporate 3.0:
ede368f20b1e00144278800d3b6bf468
corporate/3.0/RPMS/egroupware-1.0-0.RC3.1.1.C30mdk.noarch.rpm
8260713a9c28f6f7c7b08630af98b80c
corporate/3.0/RPMS/egroupware-addressbook-1.0-0.RC3.1.1.C30mdk.noarch.rpm
053e62d63d08566a51f5a4caed575920
corporate/3.0/RPMS/egroupware-backup-1.0-0.RC3.1.1.C30mdk.noarch.rpm
9d2a654955fd2dc83f965366a2af77a0
corporate/3.0/RPMS/egroupware-bookmarks-1.0-0.RC3.1.1.C30mdk.noarch.rpm
ee1d890db9e37afaa9ddd5caeab02223
corporate/3.0/RPMS/egroupware-calendar-1.0-0.RC3.1.1.C30mdk.noarch.rpm
26ecafedde93c891562ed679f833f1f0
corporate/3.0/RPMS/egroupware-comic-1.0-0.RC3.1.1.C30mdk.noarch.rpm
eecee2ff5e2c5beb36c4592235227d9d
corporate/3.0/RPMS/egroupware-developer_tools-1.0-0.RC3.1.1.C30mdk.noarch.rpm
153f3f86f72b627c3f12eb44715a01fd
corporate/3.0/RPMS/egroupware-email-1.0-0.RC3.1.1.C30mdk.noarch.rpm
3863031cfccf6ba411ae8965b4e13af0
corporate/3.0/RPMS/egroupware-emailadmin-1.0-0.RC3.1.1.C30mdk.noarch.rpm
260713edaf667a6c0af01afe5cf1276f
corporate/3.0/RPMS/egroupware-etemplate-1.0-0.RC3.1.1.C30mdk.noarch.rpm
a3ae6cc7bbbb4fb5191f41a7e602741a
corporate/3.0/RPMS/egroupware-felamimail-1.0-0.RC3.1.1.C30mdk.noarch.rpm
a95d31bb108a6126d3187af8c77c2164
corporate/3.0/RPMS/egroupware-filemanager-1.0-0.RC3.1.1.C30mdk.noarch.rpm
772a8690091f509727ef70f6b363d6bf
corporate/3.0/RPMS/egroupware-forum-1.0-0.RC3.1.1.C30mdk.noarch.rpm
e97692f7a5c888e4ea1a86236c9bd124
corporate/3.0/RPMS/egroupware-ftp-1.0-0.RC3.1.1.C30mdk.noarch.rpm
c9a5f4a17bf1697e7eb5e1e6421a6ff3
corporate/3.0/RPMS/egroupware-fudforum-1.0-0.RC3.1.1.C30mdk.noarch.rpm
d8a9513798c91e6cbd39667fa04784ff
corporate/3.0/RPMS/egroupware-headlines-1.0-0.RC3.1.1.C30mdk.noarch.rpm
87f25244c8af456bf43c66650dbc05e6
corporate/3.0/RPMS/egroupware-infolog-1.0-0.RC3.1.1.C30mdk.noarch.rpm
67fc3ed193d9e5a5b5e3d0ab4b3b21af
corporate/3.0/RPMS/egroupware-jinn-1.0-0.RC3.1.1.C30mdk.noarch.rpm
0c4a7125fa56f7e2c62b37c0e9657fda
corporate/3.0/RPMS/egroupware-messenger-1.0-0.RC3.1.1.C30mdk.noarch.rpm
7c59389b480bab742b74a7fa3c304e08
corporate/3.0/RPMS/egroupware-news_admin-1.0-0.RC3.1.1.C30mdk.noarch.rpm
ccc1a38a19f371b24014c078fd270640
corporate/3.0/RPMS/egroupware-phpbrain-1.0-0.RC3.1.1.C30mdk.noarch.rpm
4d08c9988a1a8b371dbb8e775f10ead5
corporate/3.0/RPMS/egroupware-phpldapadmin-1.0-0.RC3.1.1.C30mdk.noarch.rpm
49e15a21e9649192aec8a094fbd6ba23
corporate/3.0/RPMS/egroupware-phpsysinfo-1.0-0.RC3.1.1.C30mdk.noarch.rpm
449fc4f64a2684e801026551d10775a6
corporate/3.0/RPMS/egroupware-polls-1.0-0.RC3.1.1.C30mdk.noarch.rpm
84f495032f73864c1ca310a318837f31
corporate/3.0/RPMS/egroupware-projects-1.0-0.RC3.1.1.C30mdk.noarch.rpm
3db5f783dcda18436cbf518033f95be3
corporate/3.0/RPMS/egroupware-registration-1.0-0.RC3.1.1.C30mdk.noarch.rpm
e8113156f031a132f175176465203169
corporate/3.0/RPMS/egroupware-sitemgr-1.0-0.RC3.1.1.C30mdk.noarch.rpm
29d48e4fe5c5d1b94e59e0cc204e0543
corporate/3.0/RPMS/egroupware-skel-1.0-0.RC3.1.1.C30mdk.noarch.rpm
f6289361d472ea1ad5df3d7758f761be
corporate/3.0/RPMS/egroupware-stocks-1.0-0.RC3.1.1.C30mdk.noarch.rpm
76a227fd0a41378068f50206988bede3
corporate/3.0/RPMS/egroupware-tts-1.0-0.RC3.1.1.C30mdk.noarch.rpm
ec29184df68cc2b948acab7c5f8aeeb9
corporate/3.0/RPMS/egroupware-wiki-1.0-0.RC3.1.1.C30mdk.noarch.rpm
5384f10de57e45eeb12a9dd327ee9c10
corporate/3.0/SRPMS/egroupware-1.0-0.RC3.1.1.C30mdk.src.rpm
Corporate 3.0/X86_64:
2f1b49e341d8edd6c1932003566ffc58
x86_64/corporate/3.0/RPMS/egroupware-1.0-0.RC3.1.1.C30mdk.noarch.rpm
6ccdd0eb824c3e33ec3d563faab7c3d0
x86_64/corporate/3.0/RPMS/egroupware-addressbook-1.0-0.RC3.1.1.C30mdk.noarch.rpm
d174b44005b42690b63f579fc52f25a5
x86_64/corporate/3.0/RPMS/egroupware-backup-1.0-0.RC3.1.1.C30mdk.noarch.rpm
7a373d4cd1164b9d224d4994660261be
x86_64/corporate/3.0/RPMS/egroupware-bookmarks-1.0-0.RC3.1.1.C30mdk.noarch.rpm
c4c7ba83e63d4c020ab727489ca97cf1
x86_64/corporate/3.0/RPMS/egroupware-calendar-1.0-0.RC3.1.1.C30mdk.noarch.rpm
86c6438ad0ba2b49a6cf5ca620029061
x86_64/corporate/3.0/RPMS/egroupware-comic-1.0-0.RC3.1.1.C30mdk.noarch.rpm
d89f1c956c5e2cc42814a20acb290687
x86_64/corporate/3.0/RPMS/egroupware-developer_tools-1.0-0.RC3.1.1.C30mdk.noarch.rpm
adfbb36bfd59ce3a48dc56b921be2a54
x86_64/corporate/3.0/RPMS/egroupware-email-1.0-0.RC3.1.1.C30mdk.noarch.rpm
bfa26dd6790000f2d5ad73aff923a49e
x86_64/corporate/3.0/RPMS/egroupware-emailadmin-1.0-0.RC3.1.1.C30mdk.noarch.rpm
413c4f14dab1ec459582e550184642e3
x86_64/corporate/3.0/RPMS/egroupware-etemplate-1.0-0.RC3.1.1.C30mdk.noarch.rpm
ef5067cae004fa45cd7bd7139120b889
x86_64/corporate/3.0/RPMS/egroupware-felamimail-1.0-0.RC3.1.1.C30mdk.noarch.rpm
f3deac45103897da4f179340270e4aad
x86_64/corporate/3.0/RPMS/egroupware-filemanager-1.0-0.RC3.1.1.C30mdk.noarch.rpm
8062cb13302d80aa6bd4e88f9d979b1c
x86_64/corporate/3.0/RPMS/egroupware-forum-1.0-0.RC3.1.1.C30mdk.noarch.rpm
f7937eb4df7f85c0fe8b379023f2c573
x86_64/corporate/3.0/RPMS/egroupware-ftp-1.0-0.RC3.1.1.C30mdk.noarch.rpm
eb8bbcc4b483e98945ee601b15ec7f7d
x86_64/corporate/3.0/RPMS/egroupware-fudforum-1.0-0.RC3.1.1.C30mdk.noarch.rpm
db6def23bc1ff1b53dcadd2ffdd6a3d0
x86_64/corporate/3.0/RPMS/egroupware-headlines-1.0-0.RC3.1.1.C30mdk.noarch.rpm
1e6cc7a656c68a1ca62e31c12e893a3f
x86_64/corporate/3.0/RPMS/egroupware-infolog-1.0-0.RC3.1.1.C30mdk.noarch.rpm
71c547730fcc2bc147443bfedee83d67
x86_64/corporate/3.0/RPMS/egroupware-jinn-1.0-0.RC3.1.1.C30mdk.noarch.rpm
c5bec11237069f31df19356273a04630
x86_64/corporate/3.0/RPMS/egroupware-messenger-1.0-0.RC3.1.1.C30mdk.noarch.rpm
447920d7c091917ddf6594748e259d61
x86_64/corporate/3.0/RPMS/egroupware-news_admin-1.0-0.RC3.1.1.C30mdk.noarch.rpm
42c4c60a10da6684116fd3b02015786f
x86_64/corporate/3.0/RPMS/egroupware-phpbrain-1.0-0.RC3.1.1.C30mdk.noarch.rpm
cc3d269b9c4e0a9c0ba653d43f5e7b07
x86_64/corporate/3.0/RPMS/egroupware-phpldapadmin-1.0-0.RC3.1.1.C30mdk.noarch.rpm
234151d4addd9cc8d1ec9c8d3de20c19
x86_64/corporate/3.0/RPMS/egroupware-phpsysinfo-1.0-0.RC3.1.1.C30mdk.noarch.rpm
2d1ee394139ac708596205c94e6c7787
x86_64/corporate/3.0/RPMS/egroupware-polls-1.0-0.RC3.1.1.C30mdk.noarch.rpm
46ad113c5567a0eb11c5714b0d40d4af
x86_64/corporate/3.0/RPMS/egroupware-projects-1.0-0.RC3.1.1.C30mdk.noarch.rpm
7eb518461ed5e14e30050a0029deff78
x86_64/corporate/3.0/RPMS/egroupware-registration-1.0-0.RC3.1.1.C30mdk.noarch.rpm
064cada6a43dca2b008667279fa49b77
x86_64/corporate/3.0/RPMS/egroupware-sitemgr-1.0-0.RC3.1.1.C30mdk.noarch.rpm
0b7e02fb4f16805917ab5bb38e413f46
x86_64/corporate/3.0/RPMS/egroupware-skel-1.0-0.RC3.1.1.C30mdk.noarch.rpm
e31a1d779b948888b6f8948fd62bf234
x86_64/corporate/3.0/RPMS/egroupware-stocks-1.0-0.RC3.1.1.C30mdk.noarch.rpm
bbbfa22769e23adb399ed087872cee89
x86_64/corporate/3.0/RPMS/egroupware-tts-1.0-0.RC3.1.1.C30mdk.noarch.rpm
98edc1ce7c21635f606c714d97c78501
x86_64/corporate/3.0/RPMS/egroupware-wiki-1.0-0.RC3.1.1.C30mdk.noarch.rpm
5384f10de57e45eeb12a9dd327ee9c10
x86_64/corporate/3.0/SRPMS/egroupware-1.0-0.RC3.1.1.C30mdk.src.rpm
To upgrade automatically use MandrivaUpdate or urpmi. The
verification of md5 checksums and GPG signatures is performed
automatically for you.
All packages are signed by Mandriva for security. You can obtain
the GPG public key of the Mandriva Security Team by executing:
gpg –recv-keys –keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
SUSE Linux
SUSE Security Announcement
Package: gtk2, gdk-pixbuf
Announcement ID: SUSE-SA:2005:065
Date: Wed, 16 Nov 2005 13:23:50 +0000
Affected Products: SUSE LINUX 10.0 SUSE LINUX 9.3 SUSE LINUX 9.2
SUSE LINUX 9.1 SuSE Linux 9.0 SuSE Linux Desktop 1.0 SuSE Linux
Enterprise Server 8 SUSE SLES 9 UnitedLinux 1.0
Vulnerability Type: remote code execution
Severity (1-10): 8
SUSE Default Package: yes
Cross-References: CVE-2005-3186 CVE-2005-2976 CVE-2005-2975
Content of This Advisory:
- Security Vulnerability Resolved:
- buffer overflow
- integer overflow
- infinite loop Problem Description
- Solution or Work-Around
- Special Instructions and Notes
- Package Location and Checksums
- Pending Vulnerabilities, Solutions, and Work-Arounds: none
- Authenticity Verification and Additional Information
1) Problem Description and Brief Discussion
The image loading library of the gdk-pixbug/gtk2 package is
vulnerable to several security-related bugs. This makes every
application (mostly GNOME applications) which is linked against
this library vulnerable too.
A carefully crafted XPM file can be used to execute arbitrary
code while processing the image file. (CVE-2005-3186)
Additionally Ludwig Nussel from the SuSE Security-Team
discovered an integer overflow bug that can be used to execute
arbitray code too (CVE-2005-2976), and an infinite loop which leads
to a denial-of-service bug. (CVE-2005-2975)
2) Solution or Work-Around
none
3) Special Instructions and Notes
Please restart your system to make the update completely
effective.
4) Package Location and Checksums
The preferred method for installing security updates is to use
the YaST Online Update (YOU) tool. YOU detects which updates are
required and automatically performs the necessary steps to verify
and install them. Alternatively, download the update packages for
your distribution manually and verify their integrity by the
methods listed in Section 6 of this announcement. Then install the
packages using the command
rpm -Fhv <file.rpm>
to apply the update, replacing <file.rpm> with the
filename of the downloaded RPM package.
x86 Platform:
SUSE Linux 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/gtk2-2.8.3-4.3.i586.rpm
0be068d079c58cbbaaa52e80820e6c6e
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/gtk2-devel-2.8.3-4.3.i586.rpm
f6b37ad46fdd2ef2e7e2fc0e0e7598b1
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/gdk-pixbuf-0.22.0-72.3.i586.rpm
a3ed5aec0eb8a110af839d91468d2790
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/gdk-pixbuf-devel-0.22.0-72.3.i586.rpm
c1981e12a87989d8ccab4d91418a6310
patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/gtk2-2.8.3-4.3.i586.patch.rpm
f5fb1c48e841a15b4194f196bde2ff10
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/gtk2-devel-2.8.3-4.3.i586.patch.rpm
9e94e889694c900d46b02ef6c22ba5e4
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/gdk-pixbuf-0.22.0-72.3.i586.patch.rpm
64d3bee622ee73b5ac50dbf73e65f526
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/gdk-pixbuf-devel-0.22.0-72.3.i586.patch.rpm
c431dc98c53e4b9a000822ab311e7b0a
source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/gtk2-2.8.3-4.3.src.rpm
f827e0f9da7d988d03098559119ac2d7
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/gdk-pixbuf-0.22.0-72.3.src.rpm
87e193dc3dce8969f47d6772e10b6e3a
SUSE Linux 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/gtk2-2.6.4-6.3.i586.rpm
e7e6dceafe5a32ebab7a5b8a57661f87
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/gtk2-devel-2.6.4-6.3.i586.rpm
9f4c9d44adb7756dc7c458f266da7420
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/gdk-pixbuf-0.22.0-67.3.i586.rpm
b30948d644cc33444b5f03eeb3bca654
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/gdk-pixbuf-devel-0.22.0-67.3.i586.rpm
d515f01e0bb2292d647c04234b4c836a
patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/gtk2-2.6.4-6.3.i586.patch.rpm
0439cde8222d72a9c1c46de79c609669
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/gtk2-devel-2.6.4-6.3.i586.patch.rpm
b9e5a1af3a8ad50879ae2339643b6953
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/gdk-pixbuf-0.22.0-67.3.i586.patch.rpm
42f9f1212c01aa7e866197f921646d79
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/gdk-pixbuf-devel-0.22.0-67.3.i586.patch.rpm
da1f519c5e1b46cbf99a8eace632301f
source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/gtk2-2.6.4-6.3.src.rpm
6b7e57bea2b48ae3a7bfcc6378cdb7fe
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/gdk-pixbuf-0.22.0-67.3.src.rpm
d546d4e4ca0401b3d530f3263a83639d
SUSE Linux 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/gtk2-2.4.9-10.3.i586.rpm
eea4e22113af4911766b88fb5afff990
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/gtk2-devel-2.4.9-10.3.i586.rpm
f9bccebbdbc4951ba929c0b3bdd5e748
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/gdk-pixbuf-0.22.0-64.3.i586.rpm
2f51e4f26ac2eb72ce9b188cf1a43d12
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/gdk-pixbuf-devel-0.22.0-64.3.i586.rpm
7f9d14be9e038b6079525a99141632c2
patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/gtk2-2.4.9-10.3.i586.patch.rpm
3b9834d757ef903331eef11d263765aa
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/gtk2-devel-2.4.9-10.3.i586.patch.rpm
71a66acac5bdab4f540745e3f34513db
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/gdk-pixbuf-0.22.0-64.3.i586.patch.rpm
564c47762db1dfd0579a15a28a5bf198
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/gdk-pixbuf-devel-0.22.0-64.3.i586.patch.rpm
ae58eb0eb9b21b6dc34a88576cda8d40
source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/src/gtk2-2.4.9-10.3.src.rpm
03fbda334b284e4764d287e635738e86
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/src/gdk-pixbuf-0.22.0-64.3.src.rpm
922628a980e0c30438381c8c75ba1681
SUSE Linux 9.1:
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/gtk2-2.2.4-125.10.i586.rpm
7076812e0edec87e47ac3e2773a29908
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/gtk2-devel-2.2.4-125.10.i586.rpm
6dbc2a7c8ed993e6868ff9becd264e5b
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/gdk-pixbuf-0.22.0-62.13.i586.rpm
cfd60a7867d3f19fdf2ef457ad61c3e2
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/gdk-pixbuf-devel-0.22.0-62.13.i586.rpm
0d9cd0869e0d461ca12f1b6702e09ae6
patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/gtk2-2.2.4-125.10.i586.patch.rpm
c51455321b63c0f9db6b334879b74db2
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/gtk2-devel-2.2.4-125.10.i586.patch.rpm
2fdce6d74daaa4d0d36b9e299d005cf9
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/gdk-pixbuf-0.22.0-62.13.i586.patch.rpm
5d74d0c82efdf390e332e8cf51fe4018
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/gdk-pixbuf-devel-0.22.0-62.13.i586.patch.rpm
953ab164ef73f95aa6eabf1b75fb9e81
source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/src/gtk2-2.2.4-125.10.src.rpm
7f25bb1592667d945298b55794a5ef34
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/src/gdk-pixbuf-0.22.0-62.13.src.rpm
3ea3a4213e98c872386be297b34dbe2f
SUSE Linux 9.0:
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/gtk2-2.2.3-57.i586.rpm
b7a34c4ca59ad4ff986539d41f5a3c62
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/gtk2-devel-2.2.3-57.i586.rpm
45cfa2114c629d787f4c94ab7a7a26b5
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/gdk-pixbuf-0.18.0-615.i586.rpm
2e1d762dbce602f2cd4bdba9c6481f22
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/gdk-pixbuf-devel-0.18.0-615.i586.rpm
70152ca0189e5af94730a39d362c4679
patch rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/gtk2-2.2.3-57.i586.patch.rpm
92b162e49010fdd8bc01113a55f98963
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/gtk2-devel-2.2.3-57.i586.patch.rpm
43f931a74169a3ab25ca2219fad8e260
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/gdk-pixbuf-0.18.0-615.i586.patch.rpm
4736822d29064f7d05bee4f7eb877d5d
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/gdk-pixbuf-devel-0.18.0-615.i586.patch.rpm
aace0a16af2c70132a5c7ce94ee9315d
source rpm(s):
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/src/gtk2-2.2.3-57.src.rpm
54ea94d4fadeedc9617c6b9e3ab253c0
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/src/gdk-pixbuf-0.18.0-615.src.rpm
af97a34f1df9e537a5babb7309f10e85
x86-64 Platform:
SUSE Linux 10.0:
ftp://ftp.suse.com/pub/suse/x86_64/update/10.0/rpm/x86_64/gtk2-32bit-2.8.3-4.3.x86_64.rpm
a6f11004299a6bc194758e58631eb14d
ftp://ftp.suse.com/pub/suse/x86_64/update/10.0/rpm/x86_64/gtk2-32bit-2.8.3-4.3.x86_64.rpm
a6f11004299a6bc194758e58631eb14d
ftp://ftp.suse.com/pub/suse/x86_64/update/10.0/rpm/x86_64/gtk2-devel-2.8.3-4.3.x86_64.rpm
d10769dfd24dd41298930ba09bfef93f
ftp://ftp.suse.com/pub/suse/x86_64/update/10.0/rpm/x86_64/gdk-pixbuf-0.22.0-72.3.x86_64.rpm
d60b38927a4b25ff8d5c61b15805be4b
ftp://ftp.suse.com/pub/suse/x86_64/update/10.0/rpm/x86_64/gdk-pixbuf-devel-0.22.0-72.3.x86_64.rpm
1e4281501647d4d227f6b2c7a6709e44
ftp://ftp.suse.com/pub/suse/x86_64/update/10.0/rpm/x86_64/gdk-pixbuf-32bit-0.22.0-72.3.x86_64.rpm
b1331a95be856bca8cc58a6ba92156fa
patch rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/10.0/rpm/x86_64/gtk2-32bit-2.8.3-4.3.x86_64.patch.rpm
57dae5b10043cef231709c75b9c1fef0
ftp://ftp.suse.com/pub/suse/x86_64/update/10.0/rpm/x86_64/gtk2-32bit-2.8.3-4.3.x86_64.patch.rpm
57dae5b10043cef231709c75b9c1fef0
ftp://ftp.suse.com/pub/suse/x86_64/update/10.0/rpm/x86_64/gtk2-devel-2.8.3-4.3.x86_64.patch.rpm
0e1af403bc2a960a10b546b7551a83da
ftp://ftp.suse.com/pub/suse/x86_64/update/10.0/rpm/x86_64/gdk-pixbuf-0.22.0-72.3.x86_64.patch.rpm
d496410edd7f6da4d48a4d8fbb71c6ae
ftp://ftp.suse.com/pub/suse/x86_64/update/10.0/rpm/x86_64/gdk-pixbuf-devel-0.22.0-72.3.x86_64.patch.rpm
969bb92ada0efac69c035ed71661deaf
ftp://ftp.suse.com/pub/suse/x86_64/update/10.0/rpm/x86_64/gdk-pixbuf-32bit-0.22.0-72.3.x86_64.patch.rpm
f43a0a3ff732634d62ec5c0404a8883b
source rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/10.0/rpm/src/gtk2-2.8.3-4.3.src.rpm
f827e0f9da7d988d03098559119ac2d7
ftp://ftp.suse.com/pub/suse/x86_64/update/10.0/rpm/src/gdk-pixbuf-0.22.0-72.3.src.rpm
87e193dc3dce8969f47d6772e10b6e3a
SUSE Linux 9.3:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/x86_64/gtk2-2.6.4-6.3.x86_64.rpm
270711bb1b6d023c9d3629f312e50749
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/x86_64/gtk2-32bit-9.3-7.1.x86_64.rpm
37515e93536ea2937a0094e96aff080b
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/x86_64/gtk2-devel-2.6.4-6.3.x86_64.rpm
99822738b70178f12976c93f8bcc9e5e
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/x86_64/gdk-pixbuf-32bit-9.3-7.1.x86_64.rpm
7f083e788760599185f5383fbd6074cc
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/x86_64/gdk-pixbuf-devel-0.22.0-67.3.x86_64.rpm
d07ea6f37ec3914951a4b32f085af0a0
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/x86_64/gdk-pixbuf-32bit-9.3-7.1.x86_64.rpm
7f083e788760599185f5383fbd6074cc
patch rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/x86_64/gtk2-2.6.4-6.3.x86_64.patch.rpm
831bcb2924eacdf3e06094f155366a64
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/x86_64/gtk2-32bit-9.3-7.1.x86_64.patch.rpm
5969ab9de490013c104d32070336c702
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/x86_64/gtk2-devel-2.6.4-6.3.x86_64.patch.rpm
3f8bac290a7417022e4605681db0ec5f
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/x86_64/gdk-pixbuf-32bit-9.3-7.1.x86_64.patch.rpm
fa40ceaa517c75d2029803f8910b528d
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/x86_64/gdk-pixbuf-devel-0.22.0-67.3.x86_64.patch.rpm
7d363a368b905f1f223cc6bb6a50a744
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/x86_64/gdk-pixbuf-32bit-9.3-7.1.x86_64.patch.rpm
fa40ceaa517c75d2029803f8910b528d
source rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/src/gtk2-2.6.4-6.3.src.rpm
6b7e57bea2b48ae3a7bfcc6378cdb7fe
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/src/baselibs-32bit-9.3-7.1.src.rpm
2a749acae07d01e7249fc8348673e339
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/src/gtk2-2.6.4-6.3.src.rpm
6b7e57bea2b48ae3a7bfcc6378cdb7fe
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/src/baselibs-32bit-9.3-7.1.src.rpm
2a749acae07d01e7249fc8348673e339
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/src/gdk-pixbuf-0.22.0-67.3.src.rpm
d546d4e4ca0401b3d530f3263a83639d
ftp://ftp.suse.com/pub/suse/x86_64/update/9.3/rpm/src/baselibs-32bit-9.3-7.1.src.rpm
2a749acae07d01e7249fc8348673e339
SUSE Linux 9.2:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/gtk2-2.4.9-10.3.x86_64.rpm
2121161aa786e90f0e6ae4919da90a3a
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/gtk2-32bit-9.2-200511030547.x86_64.rpm
3c3d9e1d3a02d7c53b6c9a453c9bbb79
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/gtk2-devel-2.4.9-10.3.x86_64.rpm
de587bb88d05ef7ea69d61df65955cbb
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/gdk-pixbuf-32bit-9.2-200511030547.x86_64.rpm
5b3038697146b9fe3a736d6b0be689d6
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/gdk-pixbuf-devel-0.22.0-64.3.x86_64.rpm
dd99a4ce37d4504d17f89a5b835674c6
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/gdk-pixbuf-32bit-9.2-200511030547.x86_64.rpm
5b3038697146b9fe3a736d6b0be689d6
patch rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/gtk2-2.4.9-10.3.x86_64.patch.rpm
aa15a4974bc6bb066829cf113c0470a9
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/gtk2-32bit-9.2-200511030547.x86_64.patch.rpm
f509872128353007b4ece66bfd839d6b
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/gtk2-devel-2.4.9-10.3.x86_64.patch.rpm
18f1afa7c3b873f8aecb9d93f273dca6
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/gdk-pixbuf-32bit-9.2-200511030547.x86_64.patch.rpm
364d36b4a5a411054145ba41fb42b637
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/gdk-pixbuf-devel-0.22.0-64.3.x86_64.patch.rpm
0a6ff2ebe95bedbfd200778e5e771d74
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/gdk-pixbuf-32bit-9.2-200511030547.x86_64.patch.rpm
364d36b4a5a411054145ba41fb42b637
source rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/src/gtk2-2.4.9-10.3.src.rpm
03fbda334b284e4764d287e635738e86
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/src/baselibs-32bit-9.2-200511030547.src.rpm
336ba61bad29df1bb83a51d940ce1347
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/src/gtk2-2.4.9-10.3.src.rpm
03fbda334b284e4764d287e635738e86
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/src/baselibs-32bit-9.2-200511030547.src.rpm
336ba61bad29df1bb83a51d940ce1347
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/src/gdk-pixbuf-0.22.0-64.3.src.rpm
922628a980e0c30438381c8c75ba1681
ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/src/baselibs-32bit-9.2-200511030547.src.rpm
336ba61bad29df1bb83a51d940ce1347
SUSE Linux 9.1:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/gtk2-2.2.4-125.10.x86_64.rpm
dda27248ea4c5a9c1fac68296a02cda1
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/gtk2-devel-2.2.4-125.10.x86_64.rpm
2e6c139ee38655ed850cf7392ec6147a
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/gdk-pixbuf-0.22.0-62.13.x86_64.rpm
5f471e724c1e81511d282b2d5a0741da
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/gdk-pixbuf-devel-0.22.0-62.13.x86_64.rpm
05577700604c7651e0a9a4b0d34f929d
patch rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/gtk2-2.2.4-125.10.x86_64.patch.rpm
c3495bec0ac4043dc7fb60112cd4b93e
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/gtk2-devel-2.2.4-125.10.x86_64.patch.rpm
1a0b8b30d9b5717aea242bab6cc04def
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/gdk-pixbuf-0.22.0-62.13.x86_64.patch.rpm
38523f56baf169bc35579869e77ea3cc
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/gdk-pixbuf-devel-0.22.0-62.13.x86_64.patch.rpm
34ba091cf09bb721bbbe98194a7b8af7
source rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/gtk2-2.2.4-125.10.src.rpm
c78f44a653b8c7078850214d6d0305a4
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/gdk-pixbuf-0.22.0-62.13.src.rpm
9d56df6bd1f836bff06f3c320e6af720
SUSE Linux 9.0:
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/gtk2-2.2.3-57.x86_64.rpm
1be59dd02108d53f2b6136970281458f
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/gtk2-devel-2.2.3-57.x86_64.rpm
8c5a75f2e162f946120fbc1991177141
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/gdk-pixbuf-0.18.0-615.x86_64.rpm
9db2ce9ac353de3b3d40baa694a265fc
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/gdk-pixbuf-devel-0.18.0-615.x86_64.rpm
c4dbed18cd259adc7069e4df1fb8925b
patch rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/gtk2-2.2.3-57.x86_64.patch.rpm
99bcb3c24cdff9959c01e1f00a8bcd65
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/gtk2-devel-2.2.3-57.x86_64.patch.rpm
9ffaea29a6cb96579c158219db2fd8ea
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/gdk-pixbuf-0.18.0-615.x86_64.patch.rpm
5a684ec36f5f292aebccb55f7e23260d
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/gdk-pixbuf-devel-0.18.0-615.x86_64.patch.rpm
f0c738175d874e0c2e29866a6ee87fcc
source rpm(s):
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/src/gtk2-2.2.3-57.src.rpm
d8c2495842a49bfb178248df91c58464
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/src/gdk-pixbuf-0.18.0-615.src.rpm
fa3e8a1b1fb4b8fcc35cf9ea0afea3a3
Our maintenance customers are notified individually. The
packages are offered for installation from the maintenance web:
http://support.novell.com/cgi-bin/search/searchtid.cgi?psdb/4f5fae06488ebd06d78f3ec5ecb019e6.html
http://portal.suse.com/psdb/4f5fae06488ebd06d78f3ec5ecb019e6.html
http://support.novell.com/cgi-bin/search/searchtid.cgi?psdb/5ec7432d76a4db8b287ee5545e207443.html
http://portal.suse.com/psdb/5ec7432d76a4db8b287ee5545e207443.html
http://support.novell.com/cgi-bin/search/searchtid.cgi?psdb/fe498fdfdd2ea49200596544a0aac288.html
http://portal.suse.com/psdb/fe498fdfdd2ea49200596544a0aac288.html
5) Pending Vulnerabilities, Solutions, and Work-Arounds:
- See SUSE Security Summary Report
6) Authenticity Verification and Additional Information
- Announcement authenticity verification:
SUSE security announcements are published via mailing lists and
on Web sites. The authenticity and integrity of a SUSE security
announcement is guaranteed by a cryptographic signature in each
announcement. All SUSE security announcements are published with a
valid signature.To verify the signature of the announcement, save it as text
into a file and run the commandgpg –verify <file>
replacing <file> with the name of the file where you saved
the announcement. The output for a valid signature looks like:gpg: Signature made <DATE> using RSA key ID 3D25D3D9
gpg: Good signature from “SuSE Security Team <security@suse.de>”where <DATE> is replaced by the date the document was
signed.If the security team’s key is not contained in your key ring,
you can import it from the first installation CD. To import the
key, use the commandgpg –import gpg-pubkey-3d25d3d9-36e12d04.asc
- Package authenticity verification:
SUSE update packages are available on many mirror FTP servers
all over the world. While this service is considered valuable and
important to the free and open source software community, the
authenticity and the integrity of a package needs to be verified to
ensure that it has not been tampered with.There are two verification methods that can be used
independently from each other to prove the authenticity of a
downloaded file or RPM package:- Using the internal gpg signatures of the rpm package
- MD5 checksums as provided in this announcement
- The internal rpm package signatures provide an easy way to
verify the authenticity of an RPM package. Use the commandrpm -v –checksig <file.rpm>
to verify the signature of the package, replacing
<file.rpm> with the filename of the RPM package downloaded.
The package is unmodified if it contains a valid signature from
build@suse.de with the key ID
9C800ACA. This key is automatically imported into the RPM database
(on RPMv4-based distributions) and the gpg key ring of ‘root’
during installation. You can also find it on the first installation
CD and at the end of this announcement. - If you need an alternative means of verification, use the
md5sumcommand to verify the authenticity of the packages. Execute the
commandmd5sum <filename.rpm>
after you downloaded the file from a SUSE FTP server or its
mirrors. Then compare the resulting md5sum with the one that is
listed in the SUSE security announcement. Because the announcement
containing the checksums is cryptographically signed (by security@suse.de), the checksums show
proof of the authenticity of the package if the signature of the
announcement is valid. Note that the md5 sums published in the SUSE
Security Announcements are valid for the respective packages only.
Newer versions of these packages cannot be verified.
- SUSE runs two security mailing lists to which any interested
party may subscribe: - General Linux and SUSE security discussion. All SUSE security
announcements are sent to this list. To subscribe, send an e-mail
to - SUSE’s announce-only mailing list.
Only SUSE’s security announcements are sent to this list. To
subscribe, send an e-mail to
For general information or the frequently asked questions (FAQ),
send mail to <suse-security-info@suse.com>
or <suse-security-faq@suse.com>.
SUSE’s security contact is <security@suse.com> or
<security@suse.de>. The
<security@suse.de>
public key is listed below.
The information in this advisory may be distributed or
reproduced, provided that the advisory is not modified in any way.
In particular, the clear text signature should show proof of the
authenticity of the text.
SUSE Linux Products GmbH provides no warranties of any kind
whatsoever with respect to the information contained in this
security advisory.