SciLinux: CVE-2007-4897 pwlib SL5.x i386/x86_64
Summary
Date: Mon, 8 Oct 2007 15:23:15 -0500Reply-To: Troy DawsonSender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for pwlib on SL5.x i386/x86_64Comments: To: scientific-linux-errata@fnal.govSynopsis: Moderate: pwlib security updateIssue date: 2007-10-08CVE Names: CVE-2007-4897In Scientific Linux 5, the Ekiga teleconferencing application usesPWLib.A memory management flaw was discovered in PWLib. An attacker could use thisflaw to crash an application, such as Ekiga, which is linked with pwlib(CVE-2007-4897).SL 5.x SRPMS:pwlib-1.10.1-7.0.1.el5.src.rpm i386:pwlib-1.10.1-7.0.1.el5.i386.rpmpwlib-devel-1.10.1-7.0.1.el5.i386.rpm x86_64:pwlib-1.10.1-7.0.1.el5.x86_64.rpmpwlib-devel-1.10.1-7.0.1.el5.x86_64.rpm-Connie Sieh-Troy Dawson