Red Hat Security Advisory

RHSA-2011:1105

libpng security update

Released 2011-07-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6) libpng-2:1.2.46-1.el6_1, libpng-2:1.2.46-1.el6_1.ppc, libpng-devel-2:1.2.46-1.el6_1 +1
Red Hat Enterprise Linux Server Optional (v. 6) libpng-2:1.2.46-1.el6_1, libpng-static-2:1.2.46-1.el6_1

Fixes 3 records

TI-2011-02353 CVE-2011-2692 · GHSA-jggw-3xrj-fwp3

The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before…

MEDIUM 45

The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows remote attackers to cau…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04227 Published 2011-07-17 Fixed CWE-119

TI-2011-02351 CVE-2011-2690 · GHSA-45qx-49q8-7q26

Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8…

MEDIUM 44

Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the png_rgb_to_gray function but not the png_set_expand function, all…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03292 Published 2011-07-17 Fixed CWE-120

TI-2011-02193 CVE-2011-2501 · GHSA-8m2c-g35f-jj8v

The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before…

LOW 35

The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a c…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03484 Published 2011-07-17 Fixed CWE-125