Red Hat Security AdvisoryRHSA-2011:1104
libpng security update
Released 2011-07-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) libpng-2:1.2.10-7.1.el5_7.5, libpng-devel-2:1.2.10-7.1.el5_7.5, libpng-devel-2:1.2.10-7.1.el5_7.5.i386
- Red Hat Enterprise Linux (v. 5 server) libpng-2:1.2.10-7.1.el5_7.5, libpng-2:1.2.10-7.1.el5_7.5.i386, libpng-2:1.2.10-7.1.el5_7.5.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libpng-2:1.2.10-7.1.el5_7.5, libpng-2:1.2.10-7.1.el5_7.5.i386
Fixes 2 records
Priority MEDIUM 45
The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cau…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04227 · Published 2011-07-17 · Fixed CWE-119
Priority MEDIUM 44
Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, all…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03292 · Published 2011-07-17 · Fixed CWE-120
