User: Password:
Subscribe / Log in / New account

Eridani alert ERISA-2002:030 (libpng)

From:  Eridani Star System <>
Subject:  [Eridani-Announce] ERISA-2002:030 - libpng
Date:  Fri, 26 Jul 2002 00:01:02 +0100 (BST)

========================================================================= ERIDANI LINUX - SECURITY ANNOUNCEMENT ========================================================================= Package: libpng Summary: libpng buffer overflow vulnerability Date: 2002-07-25 ID: ERISA-2002:030 ========================================================================= Problem description: Versions of libpng prior to 1.2.4 and 1.0.14 have a buffer overflow vulnerability that could lead to remote code execution. libpng is the official PNG reference library. It supports almost all PNG features, is extensible, and has been extensively tested for over five years. Since many graphics applications use libpng, it is well worth upgrading to the new packages. ** NOTE ** Due to funnies relating to the base library being renamed to libpng10 and RPM not sure what happened there, use: rpm -e --nodeps libpng libpng-devel before installing the new libraries. ------------------------------------------------------------------------- Updated packages: a1a0dcf262c8b9dede9f3c7cb371b035 libpng-1.0.14-1.src.rpm c1ef308ada5e90c1dc81a945d77c63e0 libpng-1.0.14-1.i386.rpm 67ec0ad2b0b4794f966e0c62229731f1 libpng-devel-1.0.14-1.i386.rpm ------------------------------------------------------------------------- References: ========================================================================= Packages available from or by HTTP from Packages are signed with our GNU GPG key, also on our FTP site. Users of releases of Eridani Linux prior to 6.3 are advised to download the source RPM and rebuild for their system. Copyright (C)2002 Eridani Star System -- Michael "Soruk" McConnell Eridani Linux -- The Most Up-to-Date Red Hat-based Linux CDROMs Available Email: -- Also Debian, Slackware, Mandrake and more... _______________________________________________ Eridani-Announce mailing list To be removed from this list email requesting removal.

(Log in to post comments)

Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds