Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Fedora Core 2: Security Advisory 2004-176 Moderate: libpng DoS Risk

fedora
Calendar Grey June 21, 2004
Scroller Fedora
Fedora Core 2 has a vulnerability in libpng that may result in denial of service. Apply the advised upgrades to prevent interruptions and remote code execution from corrupted PNGs.
An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code when opened by a victi...

Summary

The libpng10 package contains an old version of libpng, a library of

functions for creating and manipulating PNG (Portable Network Graphics)

image format files.

This package is needed if you want to run binaries that were linked

dynamically

with libpng 1.0.x.

The libpng10 package contains an old version of libpng, a library of

functions for creating and manipulating PNG (Portable Network Graphics)

image format files.

This package is needed if you want to run binaries that were linked

dynamically

with libpng 1.0.x.

Update Information:

During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue in libpng that had not been fixed in Fedora Core. An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code when opened by a victim.

This update can be downloaded from:

e061938ff40d4b6d79d6a2867fade179 SRPMS/libpng10-1.0.15-5.src.rpm 10a4be8fa833afdd2c6c93452b9a81d8 x86_64/libpng10-1.0.15-5.x86_64.rpm cf1d624c20f1ec1b56247c2b996c7d0e x86_64/libpng10-devel-1.0.15-5.x86_64.rpm 249c40e90cad1abf55fdf689d4f96cba x86_64/debug/libpng10-debuginfo-1.0.15-5.x86_64.rpm 070b4e3eab29bbf9915f9220e5430db5 i386/libpng10-1.0.15-5.i386.rpm 0d058440eb04087b8db8c9652d9a6fe5 i386/libpng10-devel-1.0.15-5.i386.rpm 2007c462b58b07032c2040080690b508 i386/debug/libpng10-debuginfo-1.0.15-5.i386.rpm

This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.

-=-=-...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory DoS Fedora Core libpng moderate risk png file

Change Log

References

CORE 2:
Fedora Update Notification FEDORA-2004-176 2004-06-18 Product : Fedora Core 2 Name : libpng10 Version : 1.0.15 Release : 5 Summary : Old version of libpng, needed to run old binaries. Description : The libpng10 package contains an old version of libpng, a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files. This package is needed if you want to run binaries that were linked dynamically with libpng 1.0.x.

Update Instructions

Product: Fedora Core 2
Name: libpng10
Version: 1.0.15
Release: 5
Summary: Old version of libpng, needed to run old binaries.
Product: Fedora Core 1
Name: libpng10
Version: 1.0.15
Release: 4
Summary: Old version of libpng, needed to run old binaries.

Topics%20covered

Topics Covered

security advisory DoS Fedora Core libpng moderate risk png file

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.