Linux Today: Linux News On Internet Time.
Search Linux Today
Linux News Sections:  Developer -  High Performance -  Infrastructure -  IT Management -  Security -  Storage -
Linux Today Navigation
LT Home
Contribute
Contribute
Link to Us
Linux Jobs


Top White Papers

More on LinuxToday


Fedora Core Advisory: libpng, libpng10

Jun 18, 2004, 19:45 (2 Talkback[s])

Fedora Update Notification
FEDORA-2004-176
2004-06-18

Product : Fedora Core 2
Name : libpng10
Version : 1.0.15
Release : 5
Summary : Old version of libpng, needed to run old binaries.

Description :
The libpng10 package contains an old version of libpng, a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files.

This package is needed if you want to run binaries that were linked dynamically with libpng 1.0.x.


Update Information:

During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue in libpng that had not been fixed in Fedora Core. An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code when opened by a victim.



This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

e061938ff40d4b6d79d6a2867fade179 SRPMS/libpng10-1.0.15-5.src.rpm
10a4be8fa833afdd2c6c93452b9a81d8 x86_64/libpng10-1.0.15-5.x86_64.rpm
cf1d624c20f1ec1b56247c2b996c7d0e x86_64/libpng10-devel-1.0.15-5.x86_64.rpm
249c40e90cad1abf55fdf689d4f96cba x86_64/debug/libpng10-debuginfo-1.0.15-5.x86_64.rpm
070b4e3eab29bbf9915f9220e5430db5 i386/libpng10-1.0.15-5.i386.rpm
0d058440eb04087b8db8c9652d9a6fe5 i386/libpng10-devel-1.0.15-5.i386.rpm
2007c462b58b07032c2040080690b508 i386/debug/libpng10-debuginfo-1.0.15-5.i386.rpm

This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.



Fedora Update Notification
FEDORA-2004-175
2004-06-18

Product : Fedora Core 2
Name : libpng
Version : 1.2.5
Release : 5
Summary : A library of functions for manipulating PNG image format

files.
Description :
The libpng package contains a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm.

Libpng should be installed if you need to manipulate PNG format image files.


Update Information:

During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue in libpng that had not been fixed in Fedora Core. An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code when opened by a victim.



This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

7110a37d68c8c40e714a1ac98968bf8c SRPMS/libpng-1.2.5-5.src.rpm
459fcd366522dc38efb4a652d8def823 x86_64/libpng-1.2.5-5.x86_64.rpm
4d7c8e03855acd7b9becbe4346018696 x86_64/libpng-devel-1.2.5-5.x86_64.rpm
57c26ab46c584b6f0f988158d898c054 x86_64/debug/libpng-debuginfo-1.2.5-5.x86_64.rpm
9d383cea2fa4aef94fa80531214707bd x86_64/libpng-1.2.5-5.i386.rpm
f880999528679481d1c6ff76559a3049 x86_64/libpng-devel-1.2.5-5.i386.rpm
213aeb2882f3ebba9859367b46e64849 x86_64/debug/libpng-debuginfo-1.2.5-5.i386.rpm9d383cea2fa4aef94fa80531214707bd i386/libpng-1.2.5-5.i386.rpm
f880999528679481d1c6ff76559a3049 i386/libpng-devel-1.2.5-5.i386.rpm
213aeb2882f3ebba9859367b46e64849 i386/debug/libpng-debuginfo-1.2.5-5.i386.rpm

This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.



Fedora Update Notification
FEDORA-2004-174
2004-06-18

Product : Fedora Core 1
Name : libpng10
Version : 1.0.15
Release : 4
Summary : Old version of libpng, needed to run old binaries.

Description :
The libpng10 package contains an old version of libpng, a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files.

This package is needed if you want to run binaries that were linked dynamically with libpng 1.0.x.


Update Information:

During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue in libpng that had not been fixed in Fedora Core. An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code when opened by a victim.



This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

27291030c4b45837604fa29ea1ba63af SRPMS/libpng10-1.0.15-4.src.rpm
373999494fd66d5110f30cc13f23afdf x86_64/libpng10-1.0.15-4.x86_64.rpm
c3179356daded13a6f03f5384e201772 x86_64/libpng10-devel-1.0.15-4.x86_64.rpm
0583f6e917579a841183ade07772ee71 x86_64/debug/libpng10-debuginfo-1.0.15-4.x86_64.rpm
c340858b643a92beb4ab16bcfff55e6c i386/libpng10-1.0.15-4.i386.rpm
4642cf8bafa073269763964a85ef5139 i386/libpng10-devel-1.0.15-4.i386.rpm
67b64172374624083b436c49d0ae7a8a i386/debug/libpng10-debuginfo-1.0.15-4.i386.rpm

This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.



Fedora Update Notification
FEDORA-2004-173
2004-06-18

Product : Fedora Core 1
Name : libpng
Version : 1.2.5
Release : 4
Summary : A library of functions for manipulating PNG image format

files.
Description :
The libpng package contains a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm.

Libpng should be installed if you need to manipulate PNG format image files.


Update Information:

During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue in libpng that had not been fixed in Fedora Core. An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code when opened by a victim.



This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/

0824eaf1a7bda8624abffdf23c8e1cfd SRPMS/libpng-1.2.5-4.src.rpm
0d15484d8d0fe10aba3352d83d1a9856 x86_64/libpng-1.2.5-4.x86_64.rpm
682e673705a6c0752acf66dafc2fb235 x86_64/libpng-devel-1.2.5-4.x86_64.rpm
4c070a56703b15296c6d25c4a0bd45c7 x86_64/debug/libpng-debuginfo-1.2.5-4.x86_64.rpm
be7033c0527158fe7ce64f3e6f0bcc30 x86_64/libpng-1.2.5-4.i386.rpm
0da44b75a2e7dc229135b7cecaea0f8b x86_64/libpng-devel-1.2.5-4.i386.rpm
72987036728beaf4393af2710e81816a x86_64/debug/libpng-debuginfo-1.2.5-4.i386.rpmbe7033c0527158fe7ce64f3e6f0bcc30 i386/libpng-1.2.5-4.i386.rpm
0da44b75a2e7dc229135b7cecaea0f8b i386/libpng-devel-1.2.5-4.i386.rpm
72987036728beaf4393af2710e81816a i386/debug/libpng-debuginfo-1.2.5-4.i386.rpm

This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.