BugTraq
[ MDVSA-2012:046 ] libpng Apr 02 2012 08:19AM
security mandriva com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2012:046
http://www.mandriva.com/security/
_______________________________________________________________________

Package : libpng
Date : April 2, 2012
Affected: 2010.1, 2011., Enterprise Server 5.0
_______________________________________________________________________

Problem Description:

A potential memory corruption has been found and corrected in libpng
(CVE-2011-3048).

The updated packages have been patched to correct this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3048
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2010.1:
32abd71c77121d32499ca6b0a2adea11 2010.1/i586/libpng3-1.2.43-1.5mdv2010.2.i586.rpm
64bc26eb682602cb681f24596cc4a2ac 2010.1/i586/libpng-devel-1.2.43-1.5mdv2010.2.i586.rpm
110c7a43ed4fce2854787fdb118b338b 2010.1/i586/libpng-source-1.2.43-1.5mdv2010.2.i586.rpm
dcc52b6e893eab6419da5a23e64c70f0 2010.1/i586/libpng-static-devel-1.2.43-1.5mdv2010.2.i586.rpm
edd41240bf0a82cf1f003d1932b20322 2010.1/SRPMS/libpng-1.2.43-1.5mdv2010.2.src.rpm

Mandriva Linux 2010.1/X86_64:
14297484d771723c1836969d7916ae4f 2010.1/x86_64/lib64png3-1.2.43-1.5mdv2010.2.x86_64.rpm
e6deb402006790e218bdce7fe8dbc07c 2010.1/x86_64/lib64png-devel-1.2.43-1.5mdv2010.2.x86_64.rpm
0f4eaf1b5cb2a9797a62bfc1c51237ff 2010.1/x86_64/lib64png-static-devel-1.2.43-1.5mdv2010.2.x86_64.rpm
477ff7378350377399f217c3035d4387 2010.1/x86_64/libpng-source-1.2.43-1.5mdv2010.2.x86_64.rpm
edd41240bf0a82cf1f003d1932b20322 2010.1/SRPMS/libpng-1.2.43-1.5mdv2010.2.src.rpm

Mandriva Linux 2011:
42e6677e1cc0bb9bb5aed1cd43f0736e 2011/i586/libpng3-1.2.46-1.3-mdv2011.0.i586.rpm
c30dabb7d3d4a3b0f6c06ca7b8f12dd9 2011/i586/libpng-devel-1.2.46-1.3-mdv2011.0.i586.rpm
90772d7378e18524ffd2d762aa0897f1 2011/i586/libpng-source-1.2.46-1.3-mdv2011.0.i586.rpm
9bd1bfb1fdede615a291b422b8b345a2 2011/i586/libpng-static-devel-1.2.46-1.3-mdv2011.0.i586.rpm
6374920ff2b00d9c4b6a3d4cf4be2ce4 2011/SRPMS/libpng-1.2.46-1.3.src.rpm

Mandriva Linux 2011/X86_64:
49eb04c19c3754e0edafce7a9b275a6c 2011/x86_64/lib64png3-1.2.46-1.3-mdv2011.0.x86_64.rpm
6d9f8f5744025d03a33b78c57ac26cec 2011/x86_64/lib64png-devel-1.2.46-1.3-mdv2011.0.x86_64.rpm
a0aa36751025c8bf8c69111ba1c8630f 2011/x86_64/lib64png-static-devel-1.2.46-1.3-mdv2011.0.x86_64.rpm
a5fdad34063a5455ed605f91d4295fa7 2011/x86_64/libpng-source-1.2.46-1.3-mdv2011.0.x86_64.rpm
6374920ff2b00d9c4b6a3d4cf4be2ce4 2011/SRPMS/libpng-1.2.46-1.3.src.rpm

Mandriva Enterprise Server 5:
48c4b58100e8610b1c02edad1b22f513 mes5/i586/libpng3-1.2.31-2.7mdvmes5.2.i586.rpm
ea8eaff21b47e466c39fb67d05caf5dc mes5/i586/libpng-devel-1.2.31-2.7mdvmes5.2.i586.rpm
b47d4cc245409339a0bb5661d6a042b2 mes5/i586/libpng-source-1.2.31-2.7mdvmes5.2.i586.rpm
0f6c3f3a2f852745298c17d2ab350979 mes5/i586/libpng-static-devel-1.2.31-2.7mdvmes5.2.i586.rpm
b9250ed0aaa605e52c5e42068a1e9e04 mes5/SRPMS/libpng-1.2.31-2.7mdvmes5.2.src.rpm

Mandriva Enterprise Server 5/X86_64:
11f921419ff975163b42d90749745ba6 mes5/x86_64/lib64png3-1.2.31-2.7mdvmes5.2.x86_64.rpm
4c5ca107c3e976b411ea6c0012191ca7 mes5/x86_64/lib64png-devel-1.2.31-2.7mdvmes5.2.x86_64.rpm
b06e79b357af44896ab2ed0d82724b39 mes5/x86_64/lib64png-static-devel-1.2.31-2.7mdvmes5.2.x86_64.rpm
b356a0406ab7403663f6d914e424a3a6 mes5/x86_64/libpng-source-1.2.31-2.7mdvmes5.2.x86_64.rpm
b9250ed0aaa605e52c5e42068a1e9e04 mes5/SRPMS/libpng-1.2.31-2.7mdvmes5.2.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQFPeTLimqjQ0CJFipgRAj/VAKC0m/tdpsxpTI8Sszz56XRSIhVUsQCg6cPd
EJ2GOf6tJUkGMX/Tq9k+a+E=
=lFXJ
-----END PGP SIGNATURE-----

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus