[SECURITY] Fedora 14 Update: libpng-1.2.46-1.fc14

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...

[slackware-security] libpng

New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/libpng-1.4.8-i486-1slack13.37.txz: Upgraded. Fixed uninitializ...

RHEL 6 : libpng (RHSA-2011:1105)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1105 advisory. - libpng: regression of CVE-2004-0421 in 1.2.23+ CVE-2011-2501 - libpng: buffer overwrite in pngrgbtogray CVE-2011-2690 - libpng: Invalid re...

RHEL 4 : libpng (RHSA-2011:1103)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1103 advisory. The libpng packages contain a library of functions for creating and manipulating PNG Portable Network Graphics image format files. An uninitialized...

RHEL 5 : libpng (RHSA-2011:1104)

Updated libpng packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Debian DSA-2287-1 : libpng - several vulnerabilities

The PNG library libpng has been affected by several vulnerabilities. The most critical one is the identified as CVE-2011-2690. Using this vulnerability, an attacker is able to overwrite memory with an arbitrary amount of data controlled by her via a crafted PNG image. The other vulnerabilities ar...

libpng: regression of CVE-2004-0421 in 1.2.23+

The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service application crash via a crafted PNG image that triggers an out-of-bounds read during the copying of...

Moderate: Red Hat Security Advisory: libpng security update

Updated libpng packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

libpng: Invalid read when handling empty sCAL chunks

The pnghandlesCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly have...

libpng: buffer overwrite in png_rgb_to_gray

Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the pngrgbtogray function but not the pngsetexpand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and...

Moderate: Red Hat Security Advisory: libpng security update

Updated libpng packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

libpng: Invalid read when handling empty sCAL chunks

The pnghandlesCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly have...

Moderate: Red Hat Security Advisory: libpng security update

Updated libpng and libpng10 packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

[SECURITY] [DSA 2287-1] libpng security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2287-1 [email protected] http://www.debian.org/security/ Luciano Bello July 28, 2011 http://www.debian.org/security/faq -...

libpng security update

2:1.2.46-1 - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690, CVE-2011-2691, CVE-2011-2692 Resolves: 721305...

libpng security update

libpng: 2:1.2.7-8 - Remove incorrect fix for CVE-2011-2690; that bug doesn't exist in 1.2.7 Resolves: 721302 2:1.2.7-7 - Back-port fixes for CVE-2011-2690, CVE-2011-2692 Note: CVE-2011-2691, announced at the same time, does not apply to 1.2.7; likewise for CVE-2011-2501 Resolves: 721302 libpng10:...

DSA-2287-1 libpng - several vulnerabilities

Bulletin has no description...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : libpng vulnerabilities (USN-1175-1)

Frank Busse discovered that libpng did not properly handle certain malformed PNG images. If a user or automated system were tricked into opening a crafted PNG file, an attacker could cause libpng to crash, resulting in a denial of service. This issue only affected Ubuntu 10.04 LTS, 10.10, and...

USN-1175-1: libpng vulnerabilities

Frank Busse discovered that libpng did not properly handle certain malformed PNG images. If a user or automated system were tricked into opening a crafted PNG file, an attacker could cause libpng to crash, resulting in a denial of service. This issue only affected Ubuntu 10.04 LTS, 10.10, and...

[USN-1175-1] libpng vulnerabilities

========================================================================== Ubuntu Security Notice USN-1175-1 July 26, 2011 libpng vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...