LinuxSecurity.com
Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Welcome!
Sign up!
EnGarde Community
Login
Polls
What is the most important Linux security technology?
 
Advisories
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Securitydistro
Latest Newsletters
Linux Advisory Watch: November 21st, 2014
Linux Security Week: November 17th, 2014
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

  
Mandriva: 2011:151: libpng Print E-mail
User Rating:      How can I rate this item?
Posted by Benjamin D. Thomas   
Mandrake Multiple vulnerabilities has been discovered and corrected in libpng: The png_format_buffer function in pngerror.c in libpng allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during [More...]
 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2011:151
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : libpng
 Date    : October 17, 2011
 Affected: 2010.1, Enterprise Server 5.0
 _______________________________________________________________________

 Problem Description:

 Multiple vulnerabilities has been discovered and corrected in libpng:
 
 The png_format_buffer function in pngerror.c in libpng allows
 remote attackers to cause a denial of service (application crash)
 via a crafted PNG image that triggers an out-of-bounds read during
 the copying of error-message data.  NOTE: this vulnerability exists
 because of a CVE-2004-0421 regression (CVE-2011-2501).
 
 Buffer overflow in libpng, when used by an application that calls the
 png_rgb_to_gray function but not the png_set_expand function, allows
 remote attackers to overwrite memory with an arbitrary amount of data,
 and possibly have unspecified other impact, via a crafted PNG image
 (CVE-2011-2690).
 
 The png_err function in pngerror.c in libpng makes a function call
 using a NULL pointer argument instead of an empty-string argument,
 which allows remote attackers to cause a denial of service (application
 crash) via a crafted PNG image (CVE-2011-2691). NOTE: This does not
 affect the binary packages in Mandriva, but could affect users if
 PNG_NO_ERROR_TEXT is defined using the libpng-source-1.?.?? package.
 
 The png_handle_sCAL function in pngrutil.c in libpng does not properly
 handle invalid sCAL chunks, which allows remote attackers to cause
 a denial of service (memory corruption and application crash) or
 possibly have unspecified other impact via a crafted PNG image that
 triggers the reading of uninitialized memory (CVE-2011-2692).
 
 The updated packages have been patched to correct these issues.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2501
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2690
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2691
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2692
 _______________________________________________________________________

 Updated Packages:

 Mandriva Linux 2010.1:
 75cf5cc9e56f7cd3c621ea2ba8899df3  2010.1/i586/libpng3-1.2.43-1.2mdv2010.2.i586.rpm
 af2f3f6696d67efd19d2bf7cc30207da  2010.1/i586/libpng-devel-1.2.43-1.2mdv2010.2.i586.rpm
 5190271f8394e5114aeb3b9de6a679bc  2010.1/i586/libpng-source-1.2.43-1.2mdv2010.2.i586.rpm
 3d7b05502fd2c613f6e263c2bc4baf51  2010.1/i586/libpng-static-devel-1.2.43-1.2mdv2010.2.i586.rpm 
 4d26abf5f53ddfb40af4432b2ffe7215  2010.1/SRPMS/libpng-1.2.43-1.2mdv2010.2.src.rpm

 Mandriva Linux 2010.1/X86_64:
 3a8041586d3f6a3666231ec9744efa30  2010.1/x86_64/lib64png3-1.2.43-1.2mdv2010.2.x86_64.rpm
 3baefc4e0b5f560382ef411349142810  2010.1/x86_64/lib64png-devel-1.2.43-1.2mdv2010.2.x86_64.rpm
 63db8d8b4313907f1b7d18ac4cf7c30f  2010.1/x86_64/lib64png-static-devel-1.2.43-1.2mdv2010.2.x86_64.rpm
 bb8d9ac1982ae3591e701f1e32193733  2010.1/x86_64/libpng-source-1.2.43-1.2mdv2010.2.x86_64.rpm 
 4d26abf5f53ddfb40af4432b2ffe7215  2010.1/SRPMS/libpng-1.2.43-1.2mdv2010.2.src.rpm

 Mandriva Enterprise Server 5:
 2dc72977964282d6b9b71f02daf11875  mes5/i586/libpng3-1.2.31-2.4mdvmes5.2.i586.rpm
 3a7a29b3ce673a6023b2ebd69702de77  mes5/i586/libpng-devel-1.2.31-2.4mdvmes5.2.i586.rpm
 311e83f11ecca6e10492be05e93af450  mes5/i586/libpng-source-1.2.31-2.4mdvmes5.2.i586.rpm
 6e78659cd2132ab936672d26307508c3  mes5/i586/libpng-static-devel-1.2.31-2.4mdvmes5.2.i586.rpm 
 7716bbc53dbf07a4bcf647d19c872321  mes5/SRPMS/libpng-1.2.31-2.4mdvmes5.2.src.rpm

 Mandriva Enterprise Server 5/X86_64:
 30fbcd1e778a334751efb67347896a74  mes5/x86_64/lib64png3-1.2.31-2.4mdvmes5.2.x86_64.rpm
 98f8b1bcae2ca325b95d84b03a8a21c3  mes5/x86_64/lib64png-devel-1.2.31-2.4mdvmes5.2.x86_64.rpm
 8388f578116a05c96b2ef54120b0966a  mes5/x86_64/lib64png-static-devel-1.2.31-2.4mdvmes5.2.x86_64.rpm
 e92d9e5a9d2cec26614e0073bf8772a4  mes5/x86_64/libpng-source-1.2.31-2.4mdvmes5.2.x86_64.rpm 
 7716bbc53dbf07a4bcf647d19c872321  mes5/SRPMS/libpng-1.2.31-2.4mdvmes5.2.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________
 
< Prev   Next >
    
Partner

 

Latest Features
Peter Smith Releases Linux Network Security Online
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Yesterday's Edition
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2014 Guardian Digital, Inc. All rights reserved.