libpng: multiple vulnerabilities [LWN.net]

Package(s):

libpng

CVE #(s):

CAN-2002-1363 CAN-2004-0597 CAN-2004-0598 CAN-2004-0599

Created:

August 4, 2004

Updated:

February 10, 2005

Description:

There is yet another set of holes in libpng, versions 1.2.5 and prior, which can be exploited by a malicious image file; see this advisory from Chris Evans or this CERT advisory for details.

Alerts:

Fedora-Legacy	FLSA:1943	libpng	2005-02-08
Red Hat	RHSA-2004:421-01	mozilla	2004-08-04
Gentoo	200408-22	mozilla	2004-08-23
Whitebox	WBSA-2004:402-01	libpng	2004-08-19
Mandrake	MDKSA-2004:082	mozilla	2004-08-12
Slackware	SSA:2004-223-01	epiphany	2004-08-09
Slackware	SSA:2004-223-02	imagemagick	2004-08-07
Slackware	SSA:2004-222-01b	libpng	2004-08-10
Slackware	SSA:2004-222-01	libpng	2004-08-07
Conectiva	CLA-2004:856	libpng	2004-08-06
Trustix	TSLSA-2004-0040	libpng	2004-08-05
Gentoo	200408-03	libpng	2004-08-05
Debian	DSA-536-1	libpng	2004-08-04
Mandrake	MDKSA-2004:079	libpng	2004-08-04
SuSE	SUSE-SA:2004:023	libpng	2004-08-04
Red Hat	RHSA-2004:402-01	libpng	2004-08-04
OpenPKG	OpenPKG-SA-2004.035	png	2004-08-04

The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:

Note: you can avoid this step in the future by logging into your LWN account.