<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="bcdc9d540e9f21e297939e86656e5f92"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="178">
  <id>imlib2</id>
  <title>imlib2: Fixed an overflow in the XPM and a crash in the PNM loader</title>
  <release>openSUSE 11.0</release>
  <issued date="1220453524"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=394703" id="394703" title="bug number 394703" type="bugzilla"/>
  </references>
  <description>This update fixes two security problems in imlib2.

Specially crafted xpm files could trigger a stack based
buffer overflow in imlib2 which could potentially be
exploited to execute arbitrary code (CVE-2008-2426).

A crash in PNM handling due to a NULL pointer dereference
was fixed.
</description>
  <pkglist>
    <collection>
        <package name="imlib2" arch="i586" version="1.4.0" release="46.3">
          <filename>imlib2-1.4.0-46.3.i586.rpm</filename>
        </package>
        <package name="imlib2" arch="ppc" version="1.4.0" release="46.3">
          <filename>imlib2-1.4.0-46.3.ppc.rpm</filename>
        </package>
        <package name="imlib2" arch="x86_64" version="1.4.0" release="46.3">
          <filename>imlib2-1.4.0-46.3.x86_64.rpm</filename>
        </package>
        <package name="imlib2-devel" arch="i586" version="1.4.0" release="46.3">
          <filename>imlib2-devel-1.4.0-46.3.i586.rpm</filename>
        </package>
        <package name="imlib2-devel" arch="ppc" version="1.4.0" release="46.3">
          <filename>imlib2-devel-1.4.0-46.3.ppc.rpm</filename>
        </package>
        <package name="imlib2-devel" arch="x86_64" version="1.4.0" release="46.3">
          <filename>imlib2-devel-1.4.0-46.3.x86_64.rpm</filename>
        </package>
        <package name="imlib2-filters" arch="i586" version="1.4.0" release="46.3">
          <filename>imlib2-filters-1.4.0-46.3.i586.rpm</filename>
        </package>
        <package name="imlib2-filters" arch="ppc" version="1.4.0" release="46.3">
          <filename>imlib2-filters-1.4.0-46.3.ppc.rpm</filename>
        </package>
        <package name="imlib2-filters" arch="x86_64" version="1.4.0" release="46.3">
          <filename>imlib2-filters-1.4.0-46.3.x86_64.rpm</filename>
        </package>
        <package name="imlib2-loaders" arch="i586" version="1.4.0" release="46.3">
          <filename>imlib2-loaders-1.4.0-46.3.i586.rpm</filename>
        </package>
        <package name="imlib2-loaders" arch="ppc" version="1.4.0" release="46.3">
          <filename>imlib2-loaders-1.4.0-46.3.ppc.rpm</filename>
        </package>
        <package name="imlib2-loaders" arch="x86_64" version="1.4.0" release="46.3">
          <filename>imlib2-loaders-1.4.0-46.3.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
