Fedora Core 2: 2004-175 Critical: Libpng Denial Of Service

The libpng package contains a library of functions for creating and

manipulating PNG (Portable Network Graphics) image format files. PNG

is a bit-mapped graphics format similar to the GIF format. PNG was

created to replace the GIF format, since GIF uses a patented data

compression algorithm.

Libpng should be installed if you need to manipulate PNG format image

files.

The libpng package contains a library of functions for creating and

manipulating PNG (Portable Network Graphics) image format files. PNG

is a bit-mapped graphics format similar to the GIF format. PNG was

created to replace the GIF format, since GIF uses a patented data

compression algorithm.

Libpng should be installed if you need to manipulate PNG format image

files.

During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue in libpng that had not been fixed in Fedora Core. An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code when opened by a victim.

This update can be downloaded from:

7110a37d68c8c40e714a1ac98968bf8c SRPMS/libpng-1.2.5-5.src.rpm 459fcd366522dc38efb4a652d8def823 x86_64/libpng-1.2.5-5.x86_64.rpm 4d7c8e03855acd7b9becbe4346018696 x86_64/libpng-devel-1.2.5-5.x86_64.rpm 57c26ab46c584b6f0f988158d898c054 x86_64/debug/libpng-debuginfo-1.2.5-5.x86_64.rpm 9d383cea2fa4aef94fa80531214707bd x86_64/libpng-1.2.5-5.i386.rpm f880999528679481d1c6ff76559a3049 x86_64/libpng-devel-1.2.5-5.i386.rpm 213aeb2882f3ebba9859367b46e64849 x86_64/debug/libpng-debuginfo-1.2.5-5.i386.rpm9d383cea2fa4aef94fa80531214707bd i386/libpng-1.2.5-5.i386.rpm f880999528679481d1c6ff76559a3049 i386/libpng-devel-1.2.5-5.i386.rpm 213aeb...