-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
             AUSCERT External Security Bulletin Redistribution

     ESB-2004.0745 -- Two Debian Advisories - DSA 601-1 and DSA 602-1
        New libgd1 and libgd2 packages fix arbitrary code execution
                             30 November 2004

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           libgd1
                   libgd2
Publisher:         Debian
Operating System:  Debian GNU/Linux 3.0
                   Linux variants
                   UNIX variants
Impact:            Execute Arbitrary Code/Commands
Access:            Remote/Unauthenticated
CVE Names:         CAN-2004-0990 CAN-2004-0941

Ref:                ESB-2004.071

Original Bulletin: http://www.debian.org/security/2004/dsa-601
                   http://www.debian.org/security/2004/dsa-602

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - --------------------------------------------------------------------------
Debian Security Advisory DSA 601-1                     security@debian.org
http://www.debian.org/security/                             Martin Schulze
November 29th, 2004                     http://www.debian.org/security/faq
- - --------------------------------------------------------------------------

Package        : libgd1
Vulnerability  : integer overflow
Problem-Type   : remote
Debian-specific: no
CVE ID         : CAN-2004-0941 CAN-2004-0990

More potential integer overflows have been found in the GD graphics
library which weren't covered by our security advisory DSA 589.  They
could be exploited by a specially crafted graphic and could lead to
the execution of arbitrary code on the victim's machine.

For the stable distribution (woody) these problems have been fixed in
version 1.8.4-17.woody4.

For the unstable distribution (sid) these problems will be fixed soon.

We recommend that you upgrade your libgd1 packages.


Upgrade Instructions
- - --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.0 alias woody
- - --------------------------------

  Source archives:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd_1.8.4-17.woody4.dsc
      Size/MD5 checksum:      707 93634a4d33738a412a0554f49a8b9d40
    http://security.debian.org/pool/updates/main/libg/libgd/libgd_1.8.4-17.woody4.diff.gz
      Size/MD5 checksum:     9965 b3f6bb9f8269f7ac51cff0fc90d6617e
    http://security.debian.org/pool/updates/main/libg/libgd/libgd_1.8.4.orig.tar.gz
      Size/MD5 checksum:   559248 813625508e31f5c205904a305bdc8669

  Alpha architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_alpha.deb
      Size/MD5 checksum:   135268 4081dc6cb206bfc5b1cda52848477db6
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_alpha.deb
      Size/MD5 checksum:   133882 f3fc4248b544b666c9da66802955261e
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_alpha.deb
      Size/MD5 checksum:   112150 bbab42fc652e4b735790d0de813676a2
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_alpha.deb
      Size/MD5 checksum:   111514 d20afbe1269e0e7f56d73a259dac326d

  ARM architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_arm.deb
      Size/MD5 checksum:   123886 8192e767d6bb9ae979ac5b0031bb9b60
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_arm.deb
      Size/MD5 checksum:   123426 bbc5f441b18551da49239c2d496412dc
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_arm.deb
      Size/MD5 checksum:   104492 a8e41e0cf59296301a07c7175681ea83
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_arm.deb
      Size/MD5 checksum:   103866 657a40da6ae0fb0a98ef39359ecf09f4

  Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_i386.deb
      Size/MD5 checksum:   121370 9f75236cecdc4300281637b7ff0e6f19
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_i386.deb
      Size/MD5 checksum:   120872 6156511cd4f42f6ac1c0ab7f02e4efd7
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_i386.deb
      Size/MD5 checksum:   104316 3b752d25dc603e1c22cfc8c9d3652d39
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_i386.deb
      Size/MD5 checksum:   103768 ce23f2ec399e3b03afd6187f267c5c44

  Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_ia64.deb
      Size/MD5 checksum:   146000 add35b37fde3258d0bbace805fb53bbc
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_ia64.deb
      Size/MD5 checksum:   145044 4435f6176f328a78ccefdfe577e7ace9
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_ia64.deb
      Size/MD5 checksum:   126062 09461d4fbd83910d2e2d9bf9bb498a32
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_ia64.deb
      Size/MD5 checksum:   124688 e548cf3792b430145297be8cb0fc1148

  HP Precision architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_hppa.deb
      Size/MD5 checksum:   132370 6f44ec992062767c437a1eec29a5811f
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_hppa.deb
      Size/MD5 checksum:   131562 947d10314f9ae5ebb330dedcf9114c96
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_hppa.deb
      Size/MD5 checksum:   111716 8ca65c20c5e68f8d78cd77bb4bd065e7
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_hppa.deb
      Size/MD5 checksum:   111198 11f0ed821eef8eae926a001748a6ec03

  Motorola 680x0 architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_m68k.deb
      Size/MD5 checksum:   119412 64ad2486eaec36a62126c4c236b12b4a
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_m68k.deb
      Size/MD5 checksum:   118876 058c5e042eab276f9c054d63f0cb276e
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_m68k.deb
      Size/MD5 checksum:   102588 b395ac9ab99000983bf8fd48196d5614
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_m68k.deb
      Size/MD5 checksum:   102144 f08e703ec62969f178cf06955149a606

  Big endian MIPS architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_mips.deb
      Size/MD5 checksum:   129264 dc786f699111737bfb6f415e61d66553
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_mips.deb
      Size/MD5 checksum:   128468 610ae2712619c7a7614795198a7f4143
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_mips.deb
      Size/MD5 checksum:   106732 335c3345b9d936f144a151e7ee1cb147
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_mips.deb
      Size/MD5 checksum:   106128 ad4974e0dea304ca0026b44d780965d1

  Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_mipsel.deb
      Size/MD5 checksum:   129454 8f65e73363314e981b49ead4fe377571
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_mipsel.deb
      Size/MD5 checksum:   128600 b07298698afd4415c545d4dba0f0642d
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_mipsel.deb
      Size/MD5 checksum:   106750 65621045098ed9c1ae14a5ac26d848a3
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_mipsel.deb
      Size/MD5 checksum:   106174 ca5be6fd6631e1af4b5a8413c09152af

  PowerPC architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_powerpc.deb
      Size/MD5 checksum:   126704 9dc8d2c7e7ac7612d7060c50a9891ff5
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_powerpc.deb
      Size/MD5 checksum:   125832 6c46a4587c269ad692f3897617a13cca
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_powerpc.deb
      Size/MD5 checksum:   107162 0247901b207dde950db5cf6f64b74f09
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_powerpc.deb
      Size/MD5 checksum:   106626 b8a6de56f1eb995717615ff245e791af

  IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_s390.deb
      Size/MD5 checksum:   122748 20c39c114c631325e077c57fd6211aa5
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_s390.deb
      Size/MD5 checksum:   122184 c9108d0471bb1825159cc5f8a58496d0
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_s390.deb
      Size/MD5 checksum:   106588 82ba4f2b04e549deb0f22834ea5cc452
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_s390.deb
      Size/MD5 checksum:   105890 da80b129742d8b427e52f6ee0afa8594

  Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/libg/libgd/libgd-dev_1.8.4-17.woody4_sparc.deb
      Size/MD5 checksum:   123594 b230f7aa1beaa534f411e1de18e847e0
    http://security.debian.org/pool/updates/main/libg/libgd/libgd-noxpm-dev_1.8.4-17.woody4_sparc.deb
      Size/MD5 checksum:   123086 a68b2ff47c4801bf409027915ffa085c
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1_1.8.4-17.woody4_sparc.deb
      Size/MD5 checksum:   105088 32eb04da2010c77616faacfd7737cc33
    http://security.debian.org/pool/updates/main/libg/libgd/libgd1-noxpm_1.8.4-17.woody4_sparc.deb
      Size/MD5 checksum:   104800 7a78072a008f89d561222ea29695f7af


  These files will probably be moved into the stable distribution on
  its next update.

- - ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBqzL8W5ql+IAeqTIRAt4iAJ4xVv0L/nmb9CQutRz2IbqWnN+95gCgnQqL
ZxBI7+gG94Vlvh9OQH60c9c=
=Y0PO
- -----END PGP SIGNATURE-----

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - --------------------------------------------------------------------------
Debian Security Advisory DSA 602-1                     security@debian.org
http://www.debian.org/security/                             Martin Schulze
November 29th, 2004                     http://www.debian.org/security/faq
- - --------------------------------------------------------------------------

Package        : libgd2
Vulnerability  : integer overflow
Problem-Type   : remote
Debian-specific: no
CVE ID         : CAN-2004-0941 CAN-2004-0990

More potential integer overflows have been found in the GD graphics
library which weren't covered by our security advisory DSA 591.  They
could be exploited by a specially crafted graphic and could lead to
the execution of arbitrary code on the victim's machine.

For the stable distribution (woody) these problems have been fixed in
version 2.0.1-10woody2.

For the unstable distribution (sid) these problems will be fixed soon.

We recommend that you upgrade your libgd2 packages.


Upgrade Instructions
- - --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 3.0 alias woody
- - --------------------------------

  Source archives:

    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.1-10woody2.dsc
      Size/MD5 checksum:      705 1d2cc9219ddb2b7aa2966529cf3bc9a7
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.1-10woody2.diff.gz
      Size/MD5 checksum:     9617 1086d76096e77001fbba0f2a1c6059a8
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.1.orig.tar.gz
      Size/MD5 checksum:   436945 43af994a97f3300a1165ca4888176ece

  Alpha architecture:

    http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.1-10woody2_alpha.deb
      Size/MD5 checksum:    19612 d8e0f6c33ded095632f70bceff42c902
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.1-10woody2_alpha.deb
      Size/MD5 checksum:   134116 337b21a9138da8f5b9ba1b4ccf4760d0
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-dev_2.0.1-10woody2_alpha.deb
      Size/MD5 checksum:   161990 e48689243cb8cf857aff43f54766b83f
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.1-10woody2_alpha.deb
      Size/MD5 checksum:   133478 7635ffe6ed708c1d12ff0aec06cbf1f8

  ARM architecture:

    http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.1-10woody2_arm.deb
      Size/MD5 checksum:    16678 9d87fe62796182b01405f09ef4031811
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.1-10woody2_arm.deb
      Size/MD5 checksum:   123176 b2684677aa60a8def6a771a3602d3c12
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-dev_2.0.1-10woody2_arm.deb
      Size/MD5 checksum:   150024 a046e85434b31854f1f5c997e9c3ea27
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.1-10woody2_arm.deb
      Size/MD5 checksum:   122514 033146ae522a41a8efdca70f7dc3ecfb

  Intel IA-32 architecture:

    http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.1-10woody2_i386.deb
      Size/MD5 checksum:    16556 c0c113933c4bb677f4763689942bde11
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.1-10woody2_i386.deb
      Size/MD5 checksum:   122904 ea468d664be2a7672f4c5856ef953f56
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-dev_2.0.1-10woody2_i386.deb
      Size/MD5 checksum:   144664 74eebdfad50dec6c551ca6409646b8e0
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.1-10woody2_i386.deb
      Size/MD5 checksum:   122354 b1e823ea997b3665e28dcd5df5d565f0

  Intel IA-64 architecture:

    http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.1-10woody2_ia64.deb
      Size/MD5 checksum:    19884 1a2a378fa128e54aab768e40c4e8cc17
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.1-10woody2_ia64.deb
      Size/MD5 checksum:   151472 6b8055f52467d9c43e38f444dd731c89
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-dev_2.0.1-10woody2_ia64.deb
      Size/MD5 checksum:   177078 27c0631cef98d8602dfed8b772c2450a
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.1-10woody2_ia64.deb
      Size/MD5 checksum:   150532 fb9c8afc9b895967ba3cae6ff2b74452

  HP Precision architecture:

    http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.1-10woody2_hppa.deb
      Size/MD5 checksum:    17726 beb91da619465a73ab4fc90935f86108
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.1-10woody2_hppa.deb
      Size/MD5 checksum:   134078 e99fe164ac8cc74d6c4c9c0d1ecc541a
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-dev_2.0.1-10woody2_hppa.deb
      Size/MD5 checksum:   158574 2f0566bb2871a391495e42627d7e705a
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.1-10woody2_hppa.deb
      Size/MD5 checksum:   133518 2e55dadfe4ea416b0ec74c20680a06eb

  Motorola 680x0 architecture:

    http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.1-10woody2_m68k.deb
      Size/MD5 checksum:    16438 a863dc05c5565f5359881fcc49040aeb
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.1-10woody2_m68k.deb
      Size/MD5 checksum:   119870 fe27169e9dc7b3e9413e1f4ebdf9b02b
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-dev_2.0.1-10woody2_m68k.deb
      Size/MD5 checksum:   141724 70e95f0f20d21c495bdfc8d4dced972d
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.1-10woody2_m68k.deb
      Size/MD5 checksum:   119350 152b2d46cf82c97d75bc9ccf51e6ecc6

  Big endian MIPS architecture:

    http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.1-10woody2_mips.deb
      Size/MD5 checksum:    16444 a152fba2273b6b54ae18448ae67392c2
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.1-10woody2_mips.deb
      Size/MD5 checksum:   126318 bb4e835619a3443300586605f16fe4af
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-dev_2.0.1-10woody2_mips.deb
      Size/MD5 checksum:   155760 002ce559170228161da9caffaf776741
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.1-10woody2_mips.deb
      Size/MD5 checksum:   125662 88899f0ae15e1ea2a11fcde9dcab0f4f

  Little endian MIPS architecture:

    http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.1-10woody2_mipsel.deb
      Size/MD5 checksum:    16368 e344c32a505c139e9789adabddb1c986
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.1-10woody2_mipsel.deb
      Size/MD5 checksum:   126540 6f260950974335ad39c57c4350e50b61
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-dev_2.0.1-10woody2_mipsel.deb
      Size/MD5 checksum:   155890 c8c4dc6d12355235c14e6ede8011e259
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.1-10woody2_mipsel.deb
      Size/MD5 checksum:   125878 016b32057da5be715b5ebf7c5b5357a4

  PowerPC architecture:

    http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.1-10woody2_powerpc.deb
      Size/MD5 checksum:    16890 308133d8ad1da9f48ec94a3f08e70e8f
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.1-10woody2_powerpc.deb
      Size/MD5 checksum:   126636 d7690253a70b57bdc0169209b4fd7561
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-dev_2.0.1-10woody2_powerpc.deb
      Size/MD5 checksum:   152556 65d26bd5c7ef02258bb2b06a28328699
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.1-10woody2_powerpc.deb
      Size/MD5 checksum:   125914 55f702e8918e631c1dfb72f1932624f4

  IBM S/390 architecture:

    http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.1-10woody2_s390.deb
      Size/MD5 checksum:    17718 e38089edf1722e2cda69ace4423f1fce
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.1-10woody2_s390.deb
      Size/MD5 checksum:   126340 bbd375aeda1a9a0caca229c152efcd8e
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-dev_2.0.1-10woody2_s390.deb
      Size/MD5 checksum:   147102 42d0dc54e0b4b75734b81d5f7c608fc6
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.1-10woody2_s390.deb
      Size/MD5 checksum:   125702 8e131f35632284e63eb28ed880a63920

  Sun Sparc architecture:

    http://security.debian.org/pool/updates/main/libg/libgd2/libgd-tools_2.0.1-10woody2_sparc.deb
      Size/MD5 checksum:    16810 63fd97e9700109cfe69266d49bb47472
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2_2.0.1-10woody2_sparc.deb
      Size/MD5 checksum:   125274 d3055730f788964a930308d6be184b4d
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-dev_2.0.1-10woody2_sparc.deb
      Size/MD5 checksum:   148672 16373aa1fe4f1afcf4e4244910b3bb4f
    http://security.debian.org/pool/updates/main/libg/libgd2/libgd2-noxpm_2.0.1-10woody2_sparc.deb
      Size/MD5 checksum:   124302 ee59db0d17b4222018c166805d02d2b8


  These files will probably be moved into the stable distribution on
  its next update.

- - ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBq0b1W5ql+IAeqTIRAhlJAJ9otS96on/CoR8GqTbhcaiWE32YewCfWK+F
XP5DUA10O4828fwRWuRiF34=
=YsrM
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

If you believe that your computer system has been compromised or attacked in 
any way, we encourage you to let us know by completing the secure National IT 
Incident Reporting Form at:

        http://www.auscert.org.au/render.html?it=3192

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================

-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQCVAwUBQavDkSh9+71yA2DNAQInYQQAhtLH1cVwuk69VUGKw+YibSPWpNhxT//X
FQRuRHt3+y/jcOOCMGxdLhWMc2WDWzHS3KNYTmqkVS2GySSu0EGq1WPfPPcshtiq
8ux4xSx+QJWAoOsXKT3zxTZekF7DtRBxAkx1oXJNMNpPzNJlmt53J6SwXJvhaoMO
gko8d3uyxNA=
=/fJS
-----END PGP SIGNATURE-----