libpng, libpng10 security update

2007-10-2321:15:02

CentOS Project

lists.centos.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.208 Low

EPSS

Percentile

96.3%

JSON

CentOS Errata and Security Advisory CESA-2007:0992

The libpng package contains a library of functions for creating and
manipulating PNG (Portable Network Graphics) image format files.

Several flaws were discovered in the way libpng handled various PNG image
chunks. An attacker could create a carefully crafted PNG image file in
such a way that it could cause an application linked with libpng to crash
when the file was manipulated. (CVE-2007-5269)

Users should update to these updated packages which contain a backported
patch to correct these issues.

Affected packages:
libpng
libpng-devel
libpng10
libpng10-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0992

OSVersionArchitecturePackageVersionFilename
CentOS3i386libpng10< 1.0.13-18libpng10-1.0.13-18.i386.rpm
CentOS3i386libpng10-devel< 1.0.13-18libpng10-devel-1.0.13-18.i386.rpm
CentOS3i386libpng< 1.2.2-28libpng-1.2.2-28.i386.rpm
CentOS3i386libpng-devel< 1.2.2-28libpng-devel-1.2.2-28.i386.rpm
CentOS3i386libpng10< 1.0.13-18libpng10-1.0.13-18.i386.rpm
CentOS3x86_64libpng10< 1.0.13-18libpng10-1.0.13-18.x86_64.rpm
CentOS3x86_64libpng10-devel< 1.0.13-18libpng10-devel-1.0.13-18.x86_64.rpm
CentOS3i386libpng< 1.2.2-28libpng-1.2.2-28.i386.rpm
CentOS3x86_64libpng< 1.2.2-28libpng-1.2.2-28.x86_64.rpm
CentOS3x86_64libpng-devel< 1.2.2-28libpng-devel-1.2.2-28.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	3	i386	libpng10	< 1.0.13-18	libpng10-1.0.13-18.i386.rpm
CentOS	3	i386	libpng10-devel	< 1.0.13-18	libpng10-devel-1.0.13-18.i386.rpm
CentOS	3	i386	libpng	< 1.2.2-28	libpng-1.2.2-28.i386.rpm
CentOS	3	i386	libpng-devel	< 1.2.2-28	libpng-devel-1.2.2-28.i386.rpm
CentOS	3	i386	libpng10	< 1.0.13-18	libpng10-1.0.13-18.i386.rpm
CentOS	3	x86_64	libpng10	< 1.0.13-18	libpng10-1.0.13-18.x86_64.rpm
CentOS	3	x86_64	libpng10-devel	< 1.0.13-18	libpng10-devel-1.0.13-18.x86_64.rpm
CentOS	3	i386	libpng	< 1.2.2-28	libpng-1.2.2-28.i386.rpm
CentOS	3	x86_64	libpng	< 1.2.2-28	libpng-1.2.2-28.x86_64.rpm
CentOS	3	x86_64	libpng-devel	< 1.2.2-28	libpng-devel-1.2.2-28.x86_64.rpm