Bug 332061 - CVE-2007-5137 Tk GIF processing buffer overflow [F7]
CVE-2007-5137 Tk GIF processing buffer overflow [F7]
Product: Fedora
Classification: Fedora
Component: tk (Show other bugs)
All Linux
low Severity low
: ---
: ---
Assigned To: Marcela Mašláňová
Fedora Extras Quality Assurance
: Security
Depends On:
Blocks: CVE-2007-5137
  Show dependency treegraph
Reported: 2007-10-15 08:21 EDT by Tomas Hoger
Modified: 2007-11-30 17:12 EST (History)
0 users

See Also:
Fixed In Version: tk-8.4.13-6.fc7
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2007-10-15 08:39:51 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Tomas Hoger 2007-10-15 08:21:36 EDT
F7 tracking bug: see blocks bug list for full details of the security issue(s).

[bug automatically created by: add-tracking-bugs]
Comment 1 Marcela Mašláňová 2007-10-15 08:39:51 EDT
In F-7 is tk-8.4.13 with fixed buffer.
Comment 2 Tomas Hoger 2007-10-15 08:55:16 EDT
Marcela, I'm obviously overlooking something.  Latest F7 version I can see is
tk-8.4.13-5.fc7, which seems to be affected.  This issue was fixed in devel in
version tk-8.4.15-5.fc8, changelog uses CVE name originally assigned to this
issue - CVE-2007-4851.

Is there any F7 version I've missed?  I hope I haven't mixed up bugzillas for
CVE-2007-5137 and CVE-2007-5378.
Comment 3 Marcela Mašláňová 2007-10-15 10:48:36 EDT
I mixed different issues. The CVE-2007-5137 was solved in tk-8.4.13-6.fc7.
Comment 4 Tomas Hoger 2007-10-15 11:11:50 EDT
Marcela, thanks for prompt action!

Note You need to log in before you can comment on or make changes to this bug.