=========================================================== 
Ubuntu Security Notice USN-538-1           October 25, 2007
libpng vulnerabilities
CVE-2007-5268, CVE-2007-5269
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 6.10
Ubuntu 7.04
Ubuntu 7.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libpng12-0                      1.2.8rel-5ubuntu0.3

Ubuntu 6.10:
  libpng12-0                      1.2.8rel-5.1ubuntu0.3

Ubuntu 7.04:
  libpng12-0                      1.2.15~beta5-1ubuntu1.1

Ubuntu 7.10:
  libpng12-0                      1.2.15~beta5-2ubuntu0.1

After a standard system upgrade you need to reboot your computer to
affect the necessary changes.

Details follow:

It was discovered that libpng did not properly perform bounds checking
and comparisons in certain operations. An attacker could send a specially
crafted PNG image and cause a denial of service in applications linked
against libpng.


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:    18024 2f5479e855e43adb7194cabb883ac8a3
          Size/MD5:      652 7c59b5b568253c22b360b98bfbc2f863
          Size/MD5:   510681 cac1512878fb98f2456df6dc50bc9bc7

  Architecture independent packages:

          Size/MD5:      844 9d10a40d573885d4436e16ad88e31a3e

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   113974 d1bb76d97778fefd91b96248e05410a9
          Size/MD5:   247608 ca6b922d488946e3aeb6091ea936c3ab
          Size/MD5:    69486 afb14fd4af3ca1caf81379a2dd636950

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   111542 146e8f86ac4e94512edac4147d597221
          Size/MD5:   239742 0cb2cbff98db03589e504243f8bd5e72
          Size/MD5:    66998 0f90551eba7dbb802941f10176020070

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   111002 0348c21be19de5775664f5f4d4697ea6
          Size/MD5:   245356 4822cae4ce62f564fabc7b5e148d12f3
          Size/MD5:    66374 8e9991e9f4ba62b457e78b7d1f3cf48f

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   108676 2b8c6f083b9ddf578737c732b64c501e
          Size/MD5:   240148 c12737f2e1685a854e96d4ed803b0149
          Size/MD5:    63884 b43f766eb4a08691997c325cb29357ce

Updated packages for Ubuntu 6.10:

  Source archives:

          Size/MD5:    18142 7a1fa6769488a07ad4937b55058d20be
          Size/MD5:      659 0e364463deb7a60e86c394dd0f85621d
          Size/MD5:   510681 cac1512878fb98f2456df6dc50bc9bc7

  Architecture independent packages:

          Size/MD5:      886 cdfca65762446e2a75bdea7453c8e11e

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   113644 c98c1c55d9c721be4d55c85e3154782a
          Size/MD5:   247136 4cb7d81b8dd43576f45da54469eeb807
          Size/MD5:    69018 29878649c43c5caf21f55910dee85ba3

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   114790 b46ab6d82b1b3eb1af2c7d34920ec132
          Size/MD5:   242952 f647ed97f1eba66c3717434df3e6fb2b
          Size/MD5:    70008 4411fa853f19673cf04875ef3b87f233

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   112368 c5d14614903820090fe46d3f11be7e80
          Size/MD5:   246772 7a09990286468702efed1ef23fef1e1b
          Size/MD5:    67644 9bf5dd726762cbf0da3b42b6ce043615

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   109498 178fe40222b302b642baf3c16370db96
          Size/MD5:   241132 fcb2342431365e1657225289d62361fc
          Size/MD5:    64688 0ea2e147c986ff46cca354b6d0882e32

Updated packages for Ubuntu 7.04:

  Source archives:

          Size/MD5:    16077 12fe297fc49d38188fd9c3c3ff816c65
          Size/MD5:      823 ce38de3c431cb86eb753ac8ff4a87941
          Size/MD5:   829038 77ca14fcee1f1f4daaaa28123bd0b22d

  Architecture independent packages:

          Size/MD5:      940 a1e1e5021aedd0a6e768dd776e9c981c

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   189670 e6fb074e098472c8efeff4ca912d3407
          Size/MD5:   179942 84c0679ab5c297d8b53b21cdf8eee998
          Size/MD5:    70678 234d3840776d1af1cde440227b65369e

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   187450 6aecec3c18e2d430bd584d214ed696a4
          Size/MD5:   171632 fbc3e3519e315e11d1e7bfd905d0d204
          Size/MD5:    68354 81f3e63667ecae4d878ad3acb9f0453b

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   189726 46e1c11d028888e16a3e4ec478048fdd
          Size/MD5:   179208 7acf9d3bbe0fd242c0a204cc8e54f5fa
          Size/MD5:    70730 79cc909cd042c2d0007780e6ae230453

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   185440 dd65a7fc238270a6c2a307f55392da28
          Size/MD5:   173868 9afe36470c4dc086cf286a34f461cc5b
          Size/MD5:    66422 9e202d3c69766d246b9e50d34d1df83a

Updated packages for Ubuntu 7.10:

  Source archives:

          Size/MD5:    16265 c0986c0bef3569cc5902b893d47a3737
          Size/MD5:      823 daef559e9b9e3c7eaf418ab0174b4567
          Size/MD5:   829038 77ca14fcee1f1f4daaaa28123bd0b22d

  Architecture independent packages:

          Size/MD5:      936 8f7aabe855c26d96b37a06475d5048cf

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   189936 fe1cd7de92f11216ed26052b5f3f3106
          Size/MD5:   180176 8e32a68bf5191718c989aecd0a7f5d37
          Size/MD5:    70810 af9720da7c3228270441b5770f8e7d9b

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   187662 1d1412ba7fa1063936d88bf3fd9fad34
          Size/MD5:   171666 50160c00edd46a3e41d4e76891ecc2d8
          Size/MD5:    68416 77863d55c742291f7ff691e5af4c52cb

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   189826 54682655ffce7d1621aa4f4bbdd04e82
          Size/MD5:   179272 4044a8a2f9361996a25370fadf704329
          Size/MD5:    70678 6a643c0b5298e57db3ccf346def6bd7c

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   185536 5a3331215e71a5a7a5acb1b69d2a27b4
          Size/MD5:   173822 fa4caf616867af0b188729fb2961812a
          Size/MD5:    66370 fc28403920a01b7e032d578674169e92

Ubuntu: libpng vulnerabilities

October 25, 2007
It was discovered that libpng did not properly perform bounds checking and comparisons in certain operations

Summary

Update Instructions

References

Severity
Ubuntu Security Notice USN-538-1 October 25, 2007

Package Information

Related News

23.Tablet Connections Esm H320
2 - 3 min read
The release of Ubuntu 24.04 LTS , also known as Noble Numbat, brings various security enhancements and exciting new features . These improvements
4.Lock AbstractDigital Esm H320
2 - 3 min read
Tails 6.2 is a new Linux distribution release that expands its multilingual support and improves security features. The distribution is a
19.Laptop Bed Esm H320
2 - 3 min read
AlmaLinux 9.4 beta has been released and provides compelling reasons to consider it for desktop usage. While AlmaLinux is primarily known as a
32.Lock Code Circular Esm H320
2 - 3 min read
Linux admins and security practitioners face significant challenges in keeping their Linux systems secure amidst the constant threat of kernel bugs.
1.Penguin Landscape Esm H320
2 - 3 min read
A significant security threat, known as the Spectre v2 exploit, has been observed targeting Linux systems running on modern Intel processors. Let's
10.FingerPrint Locks Esm H320
2 - 3 min read
The recent release of I2P 2.5.0 , an anonymous P2P network that protects against online censorship, surveillance, and monitoring, has brought a slew
24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved