Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 10: 2009-6531 Low-Risk: libpng Update for CVE-2009-2042

fedora
Calendar Grey June 18, 2009
Dist Fedora Esm H88
-------------------------------------------------------------------------------- Fedora Update Notif
Update to libpng 1.2.37, to fix CVE-2009-2042

Summary

The libpng package contains a library of functions for creating and

manipulating PNG (Portable Network Graphics) image format files. PNG

is a bit-mapped graphics format similar to the GIF format. PNG was

created to replace the GIF format, since GIF uses a patented data

compression algorithm.

Libpng should be installed if you need to manipulate PNG format image

files.

Update Information:

Update to libpng 1.2.37, to fix CVE-2009-2042. This is a pretty low-risk issue, but it's been classified as a security issue...

Topics%20covered

Topics Covered

security advisory software update Fedora libpng low-risk

Change Log

* Sat Jun 13 2009 Tom Lane 2:1.2.37-1 - Update to libpng 1.2.37, to fix CVE-2009-2042 Related: #504782 * Wed Feb 25 2009 Tom Lane 2:1.2.35-1 - Update to libpng 1.2.35, to fix CVE-2009-0040 * Fri Jan 9 2009 Tom Lane 2:1.2.34-1 - Update to libpng 1.2.34 * Sun Nov 2 2008 Tom Lane 2:1.2.33-1 - Update to libpng 1.2.33

References


[ 1 ] Bug #504782 - libpng: Interlaced Images Information Disclosure Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=504782

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update libpng' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
low
Lowest
Low
Medium
High
Critical

Name: libpng
Product: Fedora 10
Version: 1.2.37
Release: 1.fc10
URL: http://www.libpng.org/pub/png/
Summary: A library of functions for manipulating PNG image format files

Topics%20covered

Topics Covered

security advisory software update Fedora libpng low-risk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here