Red Hat Security AdvisoryRHSA-2007:0356
libpng security update
Released 2007-05-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 libpng-2:1.2.2-27, libpng-2:1.2.2-27.i386, libpng-devel-2:1.2.2-27 +5
- Red Hat Enterprise Linux (v. 5 server) libpng-2:1.2.10-7.0.2, libpng-2:1.2.10-7.0.2.i386, libpng-2:1.2.10-7.0.2.ia64 +5
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 libpng-2:1.0.14-10, libpng-2:1.0.14-10.i386, libpng-2:1.0.14-10.ia64 +2
- Red Hat Enterprise Linux AS version 3 libpng-2:1.2.2-27, libpng-2:1.2.2-27.i386, libpng-2:1.2.2-27.ia64 +13
- Red Hat Enterprise Linux AS version 4 libpng-2:1.2.7-3.el4, libpng-2:1.2.7-3.el4.i386, libpng-2:1.2.7-3.el4.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) libpng-2:1.2.10-7.0.2, libpng-2:1.2.10-7.0.2.i386, libpng-devel-2:1.2.10-7.0.2.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libpng-2:1.2.10-7.0.2, libpng-devel-2:1.2.10-7.0.2, libpng-devel-2:1.2.10-7.0.2.i386
- Red Hat Enterprise Linux Desktop version 4 libpng-2:1.2.7-3.el4, libpng-2:1.2.7-3.el4.i386, libpng-devel-2:1.2.7-3.el4 +5
- Red Hat Enterprise Linux ES version 2.1 libpng-2:1.0.14-10, libpng-2:1.0.14-10.i386, libpng-devel-2:1.0.14-10.i386
- Red Hat Enterprise Linux ES version 3 libpng-2:1.2.2-27, libpng-2:1.2.2-27.i386, libpng-2:1.2.2-27.ia64 +9
- Red Hat Enterprise Linux ES version 4 libpng-2:1.2.7-3.el4, libpng-2:1.2.7-3.el4.i386, libpng-2:1.2.7-3.el4.ia64 +9
- Red Hat Enterprise Linux WS version 2.1 libpng-2:1.0.14-10, libpng-2:1.0.14-10.i386, libpng-devel-2:1.0.14-10.i386
- Red Hat Enterprise Linux WS version 3 libpng-2:1.2.2-27, libpng-2:1.2.2-27.i386, libpng-2:1.2.2-27.ia64 +9
- Red Hat Enterprise Linux WS version 4 libpng-2:1.2.7-3.el4, libpng-2:1.2.7-3.el4.i386, libpng-2:1.2.7-3.el4.ia64 +9
- Red Hat Linux Advanced Workstation 2.1 libpng-2:1.0.14-10, libpng-2:1.0.14-10.ia64, libpng-devel-2:1.0.14-10.ia64
Fixes 2 records
Priority LOW 31
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to cause a denial of service (application crash) via a grayscale PNG image with a bad tRNS chunk CRC valu…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05214 · Published 2007-05-16 · Fixed
Priority LOW 17
The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash)…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.0187 · Published 2006-11-17 · Fixed CWE-20
