Fedora alert FEDORA-2011-9343 (libpng)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 15 Update: libpng-1.2.46-1.fc15 | |
| Date: | Mon, 18 Jul 2011 22:38:24 +0000 | |
| Message-ID: | <20110718223824.B9B2311090D@bastion02.phx2.fedoraproject.org> | |
| Archive‑link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2011-9343 2011-07-15 00:42:13 -------------------------------------------------------------------------------- Name : libpng Product : Fedora 15 Version : 1.2.46 Release : 1.fc15 URL : http://www.libpng.org/pub/png/ Summary : A library of functions for manipulating PNG image format files Description : The libpng package contains a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng should be installed if you need to manipulate PNG format image files. -------------------------------------------------------------------------------- Update Information: Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690, CVE-2011-2691, CVE-2011-2692 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 14 2011 Tom Lane <tgl@redhat.com> 2:1.2.46-1 - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690, CVE-2011-2691, CVE-2011-2692 Resolves: #717509 Resolves: #721307 -------------------------------------------------------------------------------- References: [ 1 ] Bug #720607 - CVE-2011-2690 libpng: buffer overwrite in png_rgb_to_gray https://bugzilla.redhat.com/show_bug.cgi?id=720607 [ 2 ] Bug #720608 - CVE-2011-2691 libpng: Crash in png_default_error due to use of NULL Pointer https://bugzilla.redhat.com/show_bug.cgi?id=720608 [ 3 ] Bug #720612 - CVE-2011-2692 libpng: Memory corruption when handling empty sCAL chunks https://bugzilla.redhat.com/show_bug.cgi?id=720612 [ 4 ] Bug #717084 - CVE-2011-2501 libpng: regression of CVE-2004-0421 in 1.2.23+ https://bugzilla.redhat.com/show_bug.cgi?id=717084 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libpng' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...