| Description: |
From the Red Hat bugzilla:
It was reported that libpng suffers from an issue where certain highly
compressed ancillary chunks (zTxt, iTxt, iCCP) could cause libpng to stall or crash by consuming huge amounts of memory. This vulnerability is reported to affect all versions of libpng prior to 1.4.1, as well as versions of Firefox from 3.0. It is also possible that other gecko-based browsers are vulnerable as well, as well as all versions of pngcrush, ImageMagick, and GraphicsMagick. |
| Alerts: |
| Oracle |
ELSA-2012-0317 |
libpng |
2012-02-21 |
| Gentoo |
201010-01 |
libpng |
2010-10-05 |
| CentOS |
CESA-2010:0534 |
libpng |
2010-08-16 |
| CentOS |
CESA-2010:0534 |
libpng |
2010-07-21 |
| Fedora |
FEDORA-2010-10833 |
libpng10 |
2010-07-06 |
| CentOS |
CESA-2010:0534 |
libpng |
2010-07-14 |
| CentOS |
CESA-2010:0534 |
libpng |
2010-07-21 |
| Red Hat |
RHSA-2010:0534-01 |
libpng |
2010-07-14 |
| SuSE |
SUSE-SR:2010:012 |
evolution-data-server, python/libpython2_6-1_0, mozilla-nss, memcached, texlive/te_ams, mono/bytefx-data-mysql, libpng-devel, apache2-mod_php5, ncpfs, pango, libcmpiutil |
2010-05-25 |
| SuSE |
SUSE-SR:2010:011 |
dovecot12, cacti, java-1_6_0-openjdk, irssi, tar, fuse, apache2, libmysqlclient-devel, cpio, moodle, libmikmod, libicecore, evolution-data-server, libpng/libpng-devel, libesmtp |
2010-05-10 |
| SuSE |
SUSE-SR:2010:013 |
apache2-mod_php5/php5, bytefx-data-mysql/mono, flash-player, fuse, java-1_4_2-ibm, krb5, libcmpiutil/libvirt, libmozhelper-1_0-0/mozilla-xulrunner190, libopenssl-devel, libpng12-0, libpython2_6-1_0, libtheora, memcached, ncpfs, pango, puppet, python, seamonkey, te_ams, texlive |
2010-06-14 |
| Debian |
DSA-2032-1 |
libpng |
2010-04-11 |
| Pardus |
2010-41 |
libpng-1.2.43-21-6 libpng-1.2.43-20-10 |
2010-03-29 |
| Fedora |
FEDORA-2010-4616 |
libpng |
2010-03-16 |
| Fedora |
FEDORA-2010-4673 |
libpng |
2010-03-16 |
| Mandriva |
MDVSA-2010:064 |
libpng |
2010-03-23 |
| Mandriva |
MDVSA-2010:063 |
libpng |
2010-03-22 |
| Ubuntu |
USN-913-1 |
libpng |
2010-03-16 |
| Fedora |
FEDORA-2010-3414 |
libpng10 |
2010-03-03 |
| Fedora |
FEDORA-2010-3375 |
libpng10 |
2010-03-03 |
|
