New upstream release 3.0.3. Fixes #1949800, in which certain invalid PNG data could cause an integer division-by-zero, invoking undefined behavior.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-3f001ba18b 2021-05-05 01:20:25.877430 --------------------------------------------------------------------------------Name : pngcheck Product : Fedora 34 Version : 3.0.3 Release : 1.fc34 URL : http://www.libpng.org/pub/png/apps/pngcheck.html Summary : Verifies the integrity of PNG, JNG and MNG files Description : pngcheck verifies the integrity of PNG, JNG and MNG files (by checking the internal 32-bit CRCs [checksums] and decompressing the image data); it can optionally dump almost all of the chunk-level information in the image in human-readable form. For example, it can be used to print the basic statistics about an image (dimensions, bit depth, etc.); to list the color and transparency info in its palette (assuming it has one); or to extract the embedded text annotations. This is a command-line program with batch capabilities. The current release supports all PNG, MNG and JNG chunks, including the newly approved sTER stereo-layout chunk. It correctly reports errors in all but two of the images in Chris Nokleberg's brokensuite-20061204. --------------------------------------------------------------------------------Update Information: New upstream release 3.0.3. Fixes #1949800, in which certain invalid PNG data could cause an integer division-by-zero, invoking undefined behavior. --------------------------------------------------------------------------------ChangeLog: * Mon Apr 26 2021 Benjamin A. Beasley - 3.0.3-1 - New upstream release 3.0.3 (fixes #1949800) --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-3f001ba18b' at the command line.For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Backported fix for #1949800, in which certain invalid PNG data could cause an integer division-by-zero, invoking undefined behavior, from upstream release 3.0.3.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-f925ef1e2a 2021-05-05 00:52:51.707328 --------------------------------------------------------------------------------Name : pngcheck Product : Fedora 33 Version : 2.4.0 Release : 8.fc33 URL : http://www.libpng.org/pub/png/apps/pngcheck.html Summary : Verifies the integrity of PNG, JNG and MNG files Description : pngcheck verifies the integrity of PNG, JNG and MNG files (by checking the internal 32-bit CRCs [checksums] and decompressing the image data); it can optionally dump almost all of the chunk-level information in the image in human-readable form. For example, it can be used to print the basic statistics about an image (dimensions, bit depth, etc.); to list the color and transparency info in its palette (assuming it has one); or to extract the embedded text annotations. This is a command-line program with batch capabilities. The current release supports all PNG, MNG and JNG chunks, including the newly approved sTER stereo-layout chunk. It correctly reports errors in all but two of the images in Chris Nokleberg's brokensuite-20061204. --------------------------------------------------------------------------------Update Information: Backported fix for #1949800, in which certain invalid PNG data could cause an integer division-by-zero, invoking undefined behavior, from upstream release 3.0.3. --------------------------------------------------------------------------------ChangeLog: * Mon Apr 26 2021 Benjamin A. Beasley - 2.4.0-8 - Backport fix for RHBZ#1949800 from upstream release 3.0.3 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2021-f925ef1e2a' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.