Pardus alert 2011-96 (libpng)

From:
    	     
 
Meltem Parmaksız <meltem@pardus.org.tr> 
To:
    	     
 
pardus-security@pardus.org.tr 
Subject:
    	     
 
[Pardus-security]  [PLSA 2011-96] libpng: Denial of Service 
Date:
    	     
 
Tue, 12 Jul 2011 11:33:50 +0300
Message-ID:
    	     
 
<201107121133.50495.meltem@pardus.org.tr>
Archive-link:
    	     
 
Article, Thread
              
------------------------------------------------------------------------
Pardus Linux Security Advisory 2011-96            security@pardus.org.tr
------------------------------------------------------------------------
      Date: 2011-07-11
  Severity: 2
      Type: Local
------------------------------------------------------------------------

Summary
=======

A vulnerability has been fixed in libpng. 


Description
===========

CVE-2011-2501: 

The fix for CVE-2004-0421 in libpng was inadvertently  reverted  during 
the 1.2.23 development cycle. The original flaw could be used to cause a
denial of service via a carefully-crafted PNG image. 


Affected packages:

  Pardus 2009:
    libpng, all before 1.2.44-23-8


Resolution
==========

There are update(s) for libpng. You can update them via Package Manager 
or with a single command from console: 

    pisi up libpng

References
==========

  * http://bugs.pardus.org.tr/show_bug.cgi?id=18526
  * https://bugzilla.redhat.com/show_bug.cgi?id=717084

------------------------------------------------------------------------
_______________________________________________
Pardus-Security mailing list
Pardus-Security@pardus.org.tr
http://liste.pardus.org.tr/mailman/listinfo/pardus-security