Slackware: 2008-147-02 Moderate: Libjpeg Vulnerability From Corrupt Files
slackware
May 16, 2007
New libpng packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, and -current to fix a security issue
Summary
Here are the details from the Slackware 11.0 ChangeLog: patches/packages/libpng-1.2.18-i486-1_slack11.0.tgz: Upgraded to libpng-1.2.18. A grayscale PNG image with a malformed (bad CRC) tRNS chunk will crash some libpng applications. This vulnerability has been assigned the identifiers CVE-2007-2445 and CERT VU#684664. For more information, see: https://www.cve.org/CVERecord?id=CVE-2007-2445 (* Security fix *)
Topics Covered
Where Find New Packages
HINT: Getting slow download speeds from ftp.slackware.com?
Give slackware.osuosl.org a try. This is another primary FTP site
for Slackware that can be considerably faster than downloading
from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab
(https://osuosl.org/) for donating additional FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for
additional mirror sites near you.
Updated package for Slackware 8.1:
Updated package for Slackware 9.0:
Updated package for Slackware 9.1:
Updated package for Slackware 10.0:
Updated package for Slackware 10.1:
Updated package for Slackware 10.2:
Updated package for Slackware 11.0:
Updated package for Slackware -current:
MD5 Signatures
Slackware 8.1 package:
c7eb1c4fdb9770a6cdf74f254f81fc27 libpng-1.2.18-i386-1_slack8.1.tgz
Slackware 9.0 package:
8108fa520ece9138607731a74dfc141e libpng-1.2.18-i386-1_slack9.0.tgz
Slackware 9.1 package:
ac40a7b0b793dbf186fa7765f3ab7f49 libpng-1.2.18-i486-1_slack9.1.tgz
Slackware 10.0 package:
c83777019c539e619a8f08a3fe4ca145 libpng-1.2.18-i486-1_slack10.0.tgz
Slackware 10.1 package:
3f9f1ba6c975ea16b8921482fba71c74 libpng-1.2.18-i486-1_slack10.1.tgz
Slackware 10.2 package:
3a7f07dbaef1058987718fc5bc2beed0 libpng-1.2.18-i486-1_slack10.2.tgz
Slackware 11.0 package:
0dd59c370e78ef621ce810e55a012596 libpng-1.2.18-i486-1_slack11.0.tgz
Slackware -current package:
ea3063b5c3ae38d48aff4631d0275cba libpng-1.2.18-i486-1.tgz
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Installation Instructions
Installation instructions: Upgrade the packages as root: # upgradepkg libpng-1.2.18-i486-1_slack11.0.tgz
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!