libpng-1.2.10-16.0.1.AXS3

エラータID: AXSA:2012-447:02

Release date: 
Friday, March 30, 2012 - 14:34
Subject: 
libpng-1.2.10-16.0.1.AXS3
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

The libpng package contains a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm.

Libpng should be installed if you need to manipulate PNG format image files.

Security issues fixed with this release:

• CVE-2011-3045
Integer signedness error in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.

Solution: 

Update packages.

CVEs: 
CVE-2011-3045
Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.


Additional Info: 

N/A

Download: 

SRPMS
  1. libpng-1.2.10-16.0.1.AXS3.src.rpm
    MD5: 4334f03aa78d9ad14b9d6c2ac3e08795
    SHA-256: da20eb22713d0167816bfbaa6f240528a7c1717bfc617d5ce82e3eeb03f178f4
    Size: 636.82 kB

Asianux Server 3 for x86
  1. libpng-1.2.10-16.0.1.AXS3.i386.rpm
    MD5: 95457a6e5b32dc39e792608a1a2347d8
    SHA-256: c1d961c54dd7e9ba30d6f142ea9446694e1917521ad3c7ab341fbe0887a7b9ef
    Size: 241.65 kB
  2. libpng-devel-1.2.10-16.0.1.AXS3.i386.rpm
    MD5: d161651987907bf170853fb1e650c5a5
    SHA-256: 3adce8aeb69997d84759d9a96ed51fbf5810d6d6d15b2a72ed9321abea613a4c
    Size: 182.12 kB

Asianux Server 3 for x86_64
  1. libpng-1.2.10-16.0.1.AXS3.x86_64.rpm
    MD5: 7b527f24dc31f2adb636daeeb7044cc0
    SHA-256: c09253ead1f7266136af144e2bce700d5014f4233f48e46bc71231574ae15c15
    Size: 235.02 kB
  2. libpng-devel-1.2.10-16.0.1.AXS3.x86_64.rpm
    MD5: 90336df8110ded0eabb844151e710c3e
    SHA-256: e21a3c83a6cb14da3662c7dc420b8a0e27db52ee67c9ea4b1db2ed7eb4f71112
    Size: 185.22 kB