Linux Compatible
  • News
    • Channels
    • Archive
    • Search
    • Submit
  • Articles
    • Categories
  • Knowledgebase
  • Compatibility
    • Search
  • Links
  • Forums
  • Twitter
Advertisement

Latest News
[ Windows | Linux | Apple ]

· OCZ Vertex 450 Series Solid State Drives announced
· NVIDIA GeForce GTX 780 Reviews Roundup
· Apple's 'iWatch' to come in late 2014 with focus on biometrics, analyst says
· Windows 8.1 laptops with AMDs new chips to support wireless display
· HP $399 touchscreen laptop breaks price barrier
· What's Wrong with the Xbox One? and more
· Microsoft updates its YouTube Windows Phone app with some concessions to Google
· 3 Debian Updates
· The third screen: Will all Windows 8 apps run on Microsoft's Xbox One?
· CentOS-6.4 LiveCD and LiveDVD for i386 and x86_64 released

Upcoming News
· REVIEW: Nvidia GeForce GTX 780 @ PureOverclock
· iStarUSA BPU-340SATA Military Grade Drive Enclosure
· A Futurelooks New Flash - Futurelooks Weekly Giveawa?= y 2 of 3 – Win an ADATA XPG v1.0 1866mhz 8GB (4GB x 2) Mem?= ory Kit
· Security issue in livecd-tools causes password issue in Fedora cloud images
· Gigabyte C847N Motherboard @ Hardware Secrets
· An MTN News Flash - MEGATech Reviews – Tep Wireles?= s Pocket WiFi Mobile Hotspot Rental
· AMD Kabini Mainstream APU Notebook Platform Preview @ Legit Reviews
· OCZ Vertex 450 Solid State Drive Review
· [CentOS-announce] CEBA-2013:0858 CentOS 6 coreutils Update
· ZOTAC GeForce GTX 780 Graphics Card Video Review with Stuart Davidson @ HardwareHeaven.com

Linux Compatibility
· Dell Dimension 9100
· CL-CAM50001 UPC=3700284609322
· DFE 520 TX
· nVidia GeForce4 MX 440
· Gore: Ultimate Soldier
· SMC2802W V2 wi-fi 54Mbps PCI card
· Wireless modem router N300
· Dell P780
· ASUS A7V8X
· BricsCAD for Linux

New Forum Topics
· shutdown link ?
by: estirwent
on: 2013-05-11 17:46
18 replies, 6456 views

· Laptop keyboard drank soda
by: Zenn
on: 2013-04-30 00:27
1 replies, 700 views

· connecting to to internet with ubuntu
by: Zenn
on: 2013-04-30 00:26
2 replies, 4574 views

· Need Linux-compatible PS/2 expansion card
by: Zenn
on: 2013-04-30 00:26
1 replies, 773 views

· irql_not_less_or_equal blue screen
by: Zenn
on: 2013-04-30 00:25
2 replies, 1152 views

News Channels
· Drivers
· Guides
· Reviews
· Security
· Software
· Press Release
· Updates
· Interviews
· Linux
· General
· Debian
· Red Hat
· Slackware
· Gentoo
· Mandriva
· White Box
· SUSE
· GNOME
· KDE
· CentOS
· Ubuntu
· MEPIS
· Android

What's New
Login to see an overview of all news stories since your last visit.

Welcome to our website

To take full advantage of all features you need to login or register. Registration is completely free and takes only a few seconds.

Linux Compatible » News » August 2004 » RHSA-2004:402-01: Updated libpng packages fix security issues

RHSA-2004:402-01: Updated libpng packages fix security issues

Posted by Philipp Esselbach on: 08/04/2004 10:23 AM [ Print | 0 comment(s) ]

Updated libpng packages has been released for Red Hat Enterprise Linux

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated libpng packages fix security issues
Advisory ID: RHSA-2004:402-01
Issue date: 2004-08-04
Updated on: 2004-08-04
Product: Red Hat Enterprise Linux
Obsoletes: RHSA-2004:249
CVE Names: CAN-2002-1363 CAN-2004-0597 CAN-2004-0598 CAN-2004-0599
----------------------------------------------------------------------

1. Summary:

Updated libpng packages that fix several issues are now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, ppc64, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64




3. Problem description:

The libpng package contains a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files.

During a source code audit, Chris Evans discovered several buffer overflows in libpng. An attacker could create a carefully crafted PNG file in such a way that it would cause an application linked with libpng to execute arbitrary code when the file was opened by a victim. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0597 to these issues.

In addition, this audit discovered a potential NULL pointer dereference in libpng (CAN-2004-0598) and several integer overflow issues (CAN-2004-0599). An attacker could create a carefully crafted PNG file in such a way that it would cause an application linked with libpng to crash when the file was opened by the victim.

Red Hat would like to thank Chris Evans for discovering these issues.

For users of Red Hat Enterprise Linux 2.1 these patches also include a more complete fix for the out of bounds memory access flaw (CAN-2002-1363).

All users are advised to update to the updated libpng packages which contain backported security patches and are not vulnerable to these issues.

4. Solution:

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

5. RPMs required:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1:

SRPMS:
ftp://updates.redhat.com/enterprise/2.1AS/en/os/SRPMS/libpng-1.0.14-7.src.rpm
69bba6610f415bd0f21f815db1effbf2 libpng-1.0.14-7.src.rpm

i386:
c660a4e7c583306a46a0134ab104f346 libpng-1.0.14-7.i386.rpm
7b2588d5cc492eb84a1c73729303ca4e libpng-devel-1.0.14-7.i386.rpm

ia64:
86e364114c5dedb33c5252b9a3fe6211 libpng-1.0.14-7.ia64.rpm
5201c1e26319d34fb8efa09256007152 libpng-devel-1.0.14-7.ia64.rpm

Red Hat Linux Advanced Workstation 2.1:

SRPMS:
ftp://updates.redhat.com/enterprise/2.1AW/en/os/SRPMS/libpng-1.0.14-7.src.rpm
69bba6610f415bd0f21f815db1effbf2 libpng-1.0.14-7.src.rpm

ia64:
86e364114c5dedb33c5252b9a3fe6211 libpng-1.0.14-7.ia64.rpm
5201c1e26319d34fb8efa09256007152 libpng-devel-1.0.14-7.ia64.rpm

Red Hat Enterprise Linux ES version 2.1:

SRPMS:
ftp://updates.redhat.com/enterprise/2.1ES/en/os/SRPMS/libpng-1.0.14-7.src.rpm
69bba6610f415bd0f21f815db1effbf2 libpng-1.0.14-7.src.rpm

i386:
c660a4e7c583306a46a0134ab104f346 libpng-1.0.14-7.i386.rpm
7b2588d5cc492eb84a1c73729303ca4e libpng-devel-1.0.14-7.i386.rpm

Red Hat Enterprise Linux WS version 2.1:

SRPMS:
ftp://updates.redhat.com/enterprise/2.1WS/en/os/SRPMS/libpng-1.0.14-7.src.rpm
69bba6610f415bd0f21f815db1effbf2 libpng-1.0.14-7.src.rpm

i386:
c660a4e7c583306a46a0134ab104f346 libpng-1.0.14-7.i386.rpm
7b2588d5cc492eb84a1c73729303ca4e libpng-devel-1.0.14-7.i386.rpm

Red Hat Enterprise Linux AS version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3AS/en/os/SRPMS/libpng-1.2.2-25.src.rpm
1555047a805d476f63b705865ec6b1a1 libpng-1.2.2-25.src.rpm
ftp://updates.redhat.com/enterprise/3AS/en/os/SRPMS/libpng10-1.0.13-15.src.rpm
1a1c918f5d8054158036ff82bd6c8bc2 libpng10-1.0.13-15.src.rpm

i386:
63095ed0286c8978349ae94621887651 libpng-1.2.2-25.i386.rpm
a79e3d8aac72561af368e5655c9dcb13 libpng-devel-1.2.2-25.i386.rpm
12464295e19c16d1474d1132bc90216e libpng10-1.0.13-15.i386.rpm
347af31b8620742e5e6b18de0c300d62 libpng10-devel-1.0.13-15.i386.rpm

ia64:
85c1fa0360af727b4b427aaac90861b7 libpng-1.2.2-25.ia64.rpm
63095ed0286c8978349ae94621887651 libpng-1.2.2-25.i386.rpm
5800ad160885273f270a6b8ecd0b9373 libpng-devel-1.2.2-25.ia64.rpm
811109452021a7f0bc9d25437caeab97 libpng10-1.0.13-15.ia64.rpm
ba359cdb3db036a5b5b45c1a01b21791 libpng10-devel-1.0.13-15.ia64.rpm

ppc:
cbf5617d15939c413b520fcbe0594485 libpng-1.2.2-25.ppc.rpm
ddd78dd4e3439cb6cb28e5215e029a81 libpng-devel-1.2.2-25.ppc.rpm
b0810e3f95590836652144165cd7e0cc libpng10-1.0.13-15.ppc.rpm
d073fbeeef6874e0ae2238c6ef44ed6e libpng10-devel-1.0.13-15.ppc.rpm

ppc64:
5c7387ae952fcc1d4637e2655c9370a3 libpng-1.2.2-25.ppc64.rpm

s390:
0f621fbc3de1d8e4c4490e2baf2f30ef libpng-1.2.2-25.s390.rpm
aec3463a236eac2d6d6576120f92eb55 libpng-devel-1.2.2-25.s390.rpm
b4c3c6ee6d699fd51baf9f06f9275443 libpng10-1.0.13-15.s390.rpm
afb0ebe6e191e7f71929d30788a11708 libpng10-devel-1.0.13-15.s390.rpm

s390x:
f218fb58aee3535f3f0280c6c6a78dfa libpng-1.2.2-25.s390x.rpm
0f621fbc3de1d8e4c4490e2baf2f30ef libpng-1.2.2-25.s390.rpm
50d5ecfe73aa1f3a7ef0c41fb8fb79c6 libpng-devel-1.2.2-25.s390x.rpm
4b2733ffcb3d84295dcfecc36e69faaa libpng10-1.0.13-15.s390x.rpm
edf03becdf0b2a6044c85896a005e1c3 libpng10-devel-1.0.13-15.s390x.rpm

x86_64:
80265ad8a377cf67f2906994e7b763af libpng-1.2.2-25.x86_64.rpm
63095ed0286c8978349ae94621887651 libpng-1.2.2-25.i386.rpm
188fec715d9a2129f28c775ad3917f7a libpng-devel-1.2.2-25.x86_64.rpm
006b451f489d3ec09ad39d23099ea0fb libpng10-1.0.13-15.x86_64.rpm
e9a385e6c6c14d7575d84f045b01c054 libpng10-devel-1.0.13-15.x86_64.rpm

Red Hat Desktop version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3desktop/en/os/SRPMS/libpng-1.2.2-25.src.rpm
1555047a805d476f63b705865ec6b1a1 libpng-1.2.2-25.src.rpm
ftp://updates.redhat.com/enterprise/3desktop/en/os/SRPMS/libpng10-1.0.13-15.src.rpm
1a1c918f5d8054158036ff82bd6c8bc2 libpng10-1.0.13-15.src.rpm

i386:
63095ed0286c8978349ae94621887651 libpng-1.2.2-25.i386.rpm
a79e3d8aac72561af368e5655c9dcb13 libpng-devel-1.2.2-25.i386.rpm
12464295e19c16d1474d1132bc90216e libpng10-1.0.13-15.i386.rpm
347af31b8620742e5e6b18de0c300d62 libpng10-devel-1.0.13-15.i386.rpm

x86_64:
80265ad8a377cf67f2906994e7b763af libpng-1.2.2-25.x86_64.rpm
63095ed0286c8978349ae94621887651 libpng-1.2.2-25.i386.rpm
188fec715d9a2129f28c775ad3917f7a libpng-devel-1.2.2-25.x86_64.rpm
006b451f489d3ec09ad39d23099ea0fb libpng10-1.0.13-15.x86_64.rpm
e9a385e6c6c14d7575d84f045b01c054 libpng10-devel-1.0.13-15.x86_64.rpm

Red Hat Enterprise Linux ES version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3ES/en/os/SRPMS/libpng-1.2.2-25.src.rpm
1555047a805d476f63b705865ec6b1a1 libpng-1.2.2-25.src.rpm
ftp://updates.redhat.com/enterprise/3ES/en/os/SRPMS/libpng10-1.0.13-15.src.rpm
1a1c918f5d8054158036ff82bd6c8bc2 libpng10-1.0.13-15.src.rpm

i386:
63095ed0286c8978349ae94621887651 libpng-1.2.2-25.i386.rpm
a79e3d8aac72561af368e5655c9dcb13 libpng-devel-1.2.2-25.i386.rpm
12464295e19c16d1474d1132bc90216e libpng10-1.0.13-15.i386.rpm
347af31b8620742e5e6b18de0c300d62 libpng10-devel-1.0.13-15.i386.rpm

ia64:
85c1fa0360af727b4b427aaac90861b7 libpng-1.2.2-25.ia64.rpm
63095ed0286c8978349ae94621887651 libpng-1.2.2-25.i386.rpm
5800ad160885273f270a6b8ecd0b9373 libpng-devel-1.2.2-25.ia64.rpm
811109452021a7f0bc9d25437caeab97 libpng10-1.0.13-15.ia64.rpm
ba359cdb3db036a5b5b45c1a01b21791 libpng10-devel-1.0.13-15.ia64.rpm

x86_64:
80265ad8a377cf67f2906994e7b763af libpng-1.2.2-25.x86_64.rpm
63095ed0286c8978349ae94621887651 libpng-1.2.2-25.i386.rpm
188fec715d9a2129f28c775ad3917f7a libpng-devel-1.2.2-25.x86_64.rpm
006b451f489d3ec09ad39d23099ea0fb libpng10-1.0.13-15.x86_64.rpm
e9a385e6c6c14d7575d84f045b01c054 libpng10-devel-1.0.13-15.x86_64.rpm

Red Hat Enterprise Linux WS version 3:

SRPMS:
ftp://updates.redhat.com/enterprise/3WS/en/os/SRPMS/libpng-1.2.2-25.src.rpm
1555047a805d476f63b705865ec6b1a1 libpng-1.2.2-25.src.rpm
ftp://updates.redhat.com/enterprise/3WS/en/os/SRPMS/libpng10-1.0.13-15.src.rpm
1a1c918f5d8054158036ff82bd6c8bc2 libpng10-1.0.13-15.src.rpm

i386:
63095ed0286c8978349ae94621887651 libpng-1.2.2-25.i386.rpm
a79e3d8aac72561af368e5655c9dcb13 libpng-devel-1.2.2-25.i386.rpm
12464295e19c16d1474d1132bc90216e libpng10-1.0.13-15.i386.rpm
347af31b8620742e5e6b18de0c300d62 libpng10-devel-1.0.13-15.i386.rpm

ia64:
85c1fa0360af727b4b427aaac90861b7 libpng-1.2.2-25.ia64.rpm
63095ed0286c8978349ae94621887651 libpng-1.2.2-25.i386.rpm
5800ad160885273f270a6b8ecd0b9373 libpng-devel-1.2.2-25.ia64.rpm
811109452021a7f0bc9d25437caeab97 libpng10-1.0.13-15.ia64.rpm
ba359cdb3db036a5b5b45c1a01b21791 libpng10-devel-1.0.13-15.ia64.rpm

x86_64:
80265ad8a377cf67f2906994e7b763af libpng-1.2.2-25.x86_64.rpm
63095ed0286c8978349ae94621887651 libpng-1.2.2-25.i386.rpm
188fec715d9a2129f28c775ad3917f7a libpng-devel-1.2.2-25.x86_64.rpm
006b451f489d3ec09ad39d23099ea0fb libpng10-1.0.13-15.x86_64.rpm
e9a385e6c6c14d7575d84f045b01c054 libpng10-devel-1.0.13-15.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://www.redhat.com/security/team/key.html#package

6. References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-1363
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0597
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0598
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0599

7. Contact:

The Red Hat security contact is secalert@redhat.com. More contact details at https://www.redhat.com/security/team/contact.html

Copyright 2004 Red Hat, Inc.


Bookmark and Share

« HIS 9550 VIVO Review · RHSA-2004:373-01: GNOME VFS updates address extfs vulnerability »

Linux Compatible » News » August 2004 » RHSA-2004:402-01: Updated libpng packages fix security issues
All products mentioned are registered trademarks or trademarks of their respective owners.
© 2002-2013 Esselbach Internet Solutions - All Rights Reserved. Terms and privacy policy
Powered by Contentteller® Business Edition