On Sat, Nov 19, 2005 at 03:55:14PM +0200, Michael Shigorin wrote: > Я сейчас не смогу проверить gtk2 на ALM2.4 (станции под ним > есть в офисе) -- заливать в backports или с учётом близости > версий и вроде как проверенными патчами в updates incoming? Уехало в backports: * Sat Nov 19 2005 Michael Shigorin 2.4.14-alt1.M24.1 - security fixes for CVE-2005-2975 and CVE-2005-3186: + prevent an infinite loop in the xpm loader (RH #171904) + prevent an integer overflow in the xpm loader (RH #171073) - patches from RH packages * Sat Nov 19 2005 Michael Shigorin 0.22.0-alt8.M24.2 - security fixes for CVE-2005-3186, CVE-2005-2976, CVE-2005-2976: + prevent an integer overflow in the xpm loader (RH #171073) + prevent an infinite loop in the xpm loader (RH #171900) + prevent another integer overflow in the xpm loader (RH #171900) - patches from RH package - ported a bit of xpm-ncol-overflow.patch to rh-alt-bound.patch (which already had one of added checks and a few others); thus patch20 isn't needed Просьба проверить, кандидат в updates. -- ---- WBR, Michael Shigorin ------ Linux.Kiev http://www.linux.kiev.ua/