Synopsis: Moderate: netpbm security update Issue date: 2008-02-28 CVE Names: CVE-2008-0554 An input validation flaw was discovered in the GIF-to-PNM converter (giftopnm) shipped with the netpbm package. An attacker could create a carefully crafted GIF file which could cause giftopnm to crash or possibly execute arbitrary code as the user running giftopnm. (CVE-2008-0554) SL 3.0.x SRPMS: netpbm-9.24-11.30.5.src.rpm i386: netpbm-9.24-11.30.5.i386.rpm netpbm-devel-9.24-11.30.5.i386.rpm netpbm-progs-9.24-11.30.5.i386.rpm x86_64: netpbm-9.24-11.30.5.i386.rpm netpbm-9.24-11.30.5.x86_64.rpm netpbm-devel-9.24-11.30.5.x86_64.rpm netpbm-progs-9.24-11.30.5.x86_64.rpm SL 4.x SRPMS: netpbm-10.25-2.EL4.6.el4_6.1.src.rpm i386: netpbm-10.25-2.EL4.6.el4_6.1.i386.rpm netpbm-devel-10.25-2.EL4.6.el4_6.1.i386.rpm netpbm-progs-10.25-2.EL4.6.el4_6.1.i386.rpm x86_64: netpbm-10.25-2.EL4.6.el4_6.1.i386.rpm netpbm-10.25-2.EL4.6.el4_6.1.x86_64.rpm netpbm-devel-10.25-2.EL4.6.el4_6.1.x86_64.rpm netpbm-progs-10.25-2.EL4.6.el4_6.1.x86_64.rpm -Connie Sieh -Troy Dawson