Red Hat Security AdvisoryRHSA-2009:0333
libpng security update
Released 2009-03-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) libpng-2:1.2.10-7.1.el5_3.2, libpng-2:1.2.10-7.1.el5_3.2.i386, libpng-2:1.2.10-7.1.el5_3.2.ia64 +5
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 libpng-2:1.0.14-12, libpng-2:1.0.14-12.i386, libpng-2:1.0.14-12.ia64 +2
- Red Hat Enterprise Linux AS version 4 libpng-2:1.2.7-3.el4_7.2, libpng-2:1.2.7-3.el4_7.2.i386, libpng-2:1.2.7-3.el4_7.2.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) libpng-2:1.2.10-7.1.el5_3.2, libpng-2:1.2.10-7.1.el5_3.2.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libpng-2:1.2.10-7.1.el5_3.2, libpng-devel-2:1.2.10-7.1.el5_3.2, libpng-devel-2:1.2.10-7.1.el5_3.2.i386
- Red Hat Enterprise Linux Desktop version 4 libpng-2:1.2.7-3.el4_7.2, libpng-2:1.2.7-3.el4_7.2.i386, libpng-devel-2:1.2.7-3.el4_7.2 +5
- Red Hat Enterprise Linux ES version 2.1 libpng-2:1.0.14-12, libpng-2:1.0.14-12.i386, libpng-devel-2:1.0.14-12.i386
- Red Hat Enterprise Linux ES version 4 libpng-2:1.2.7-3.el4_7.2, libpng-2:1.2.7-3.el4_7.2.i386, libpng-2:1.2.7-3.el4_7.2.ia64 +9
- Red Hat Enterprise Linux WS version 2.1 libpng-2:1.0.14-12, libpng-2:1.0.14-12.i386, libpng-devel-2:1.0.14-12.i386
- Red Hat Enterprise Linux WS version 4 libpng-2:1.2.7-3.el4_7.2, libpng-2:1.2.7-3.el4_7.2.i386, libpng-2:1.2.7-3.el4_7.2.ia64 +9
- Red Hat Linux Advanced Workstation 2.1 libpng-2:1.0.14-12, libpng-2:1.0.14-12.ia64, libpng-devel-2:1.0.14-12.ia64
Fixes 2 records
Priority MEDIUM 41
libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG file with zero…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05514 · Published 2008-04-14 · Fixed CWE-189
Priority LOW 38
The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly e…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04825 · Published 2009-02-22 · Fixed CWE-824
