libpng-1.2.48-1.AXS4

エラータID: AXSA:2012-452:02

Release date: 
Saturday, March 31, 2012 - 10:07
Subject: 
libpng-1.2.48-1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

The libpng package contains a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm.

Libpng should be installed if you need to manipulate PNG format image files.

Security issues fixed with this release:

• CVE-2011-3045
Integer signedness error in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.

Solution: 

Update packages.

CVEs: 
CVE-2011-3045
Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.


Additional Info: 

N/A

Download: 

SRPMS
  1. libpng-1.2.48-1.AXS4.src.rpm
    MD5: 01db14538f8e982b8127dc5bd99e216a
    SHA-256: 128757fe016429ea8e8517782f9dd44e06068d5a1340f20280a05cc70b25bea3
    Size: 673.59 kB

Asianux Server 4 for x86
  1. libpng-1.2.48-1.AXS4.i686.rpm
    MD5: a21faf23749ca5df01c756350866b7b5
    SHA-256: 3b865035637687604c3fdfa24a7985a138149ee25a51a658fa83ec901a5b9ec0
    Size: 182.49 kB
  2. libpng-devel-1.2.48-1.AXS4.i686.rpm
    MD5: b615db611fe8aa4a528cd614e3003e12
    SHA-256: 3ea3d7a249b82496c0bbb238a3160e8d4b4c9c36f0c6f6c213f24f665b974a7c
    Size: 111.38 kB

Asianux Server 4 for x86_64
  1. libpng-1.2.48-1.AXS4.x86_64.rpm
    MD5: 486aea506b56fe7751d2f83a40535a52
    SHA-256: 5c6dd6b8ac00210e624e1a3deb24d2234d9ffa786420bd77d6fa9299b71773d3
    Size: 180.62 kB
  2. libpng-devel-1.2.48-1.AXS4.x86_64.rpm
    MD5: 47d94eb1331b0639a39e090db7fe16f2
    SHA-256: a54d30608705f29a7ab57f459938fe69a70b03a999d466f86c8c009aea2afe80
    Size: 110.93 kB
  3. libpng-1.2.48-1.AXS4.i686.rpm
    MD5: a21faf23749ca5df01c756350866b7b5
    SHA-256: 3b865035637687604c3fdfa24a7985a138149ee25a51a658fa83ec901a5b9ec0
    Size: 182.49 kB
  4. libpng-devel-1.2.48-1.AXS4.i686.rpm
    MD5: b615db611fe8aa4a528cd614e3003e12
    SHA-256: 3ea3d7a249b82496c0bbb238a3160e8d4b4c9c36f0c6f6c213f24f665b974a7c
    Size: 111.38 kB