| |||||||||||||||||||
CentOS alert CESA-2011:1104 (libpng)
CentOS Errata and Security Advisory 2011:1104 Moderate Upstream details at : https://rhn.redhat.com/errata/RHSA-2011-1104.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: dddd09f51bd45bbf4fb3e49ee561dae5 libpng-1.2.10-7.1.el5_7.5.i386.rpm adb9130a49abd3a11cc04f46d4b9338b libpng-1.2.10-7.1.el5_7.5.x86_64.rpm 8f37c74df1bc5ef26a549bd94e1cc31e libpng-devel-1.2.10-7.1.el5_7.5.i386.rpm 3aba940dffe265e7595ae82c03f98ba7 libpng-devel-1.2.10-7.1.el5_7.5.x86_64.rpm Source: 28e04e05f41e1e2eda1320b70f915626 libpng-1.2.10-7.1.el5_7.5.src.rpm -- Karanbir Singh CentOS Project { http://www.centos.org/ } irc: z00dax, #centos@irc.freenode.net _______________________________________________ CentOS-announce mailing list CentOS-announce@centos.org http://lists.centos.org/mailman/listinfo/centos-announce (Log in to post comments)
CentOS security update to libpng Posted Sep 28, 2011 3:58 UTC (Wed) by dvdeug (subscriber, #10998) [Link]
For the love of Pete. We've had tools to catch buffer overflows for decades; is a small slowdown on something as fast as PNG reading really worth a continuing stream of security holes?
CentOS security update to libpng Posted Sep 28, 2011 11:10 UTC (Wed) by nix (subscriber, #2304) [Link]
More relevant I think is that libpng still has no regression test suite to catch things like this.
|
|||||||||||||||||||