pjp
Administrator
Joined: 16 Apr 2002
Posts: 20588
|
 Posted: Wed Jan 08, 2003 4:51 pm Post subject: [gentoo-security] GLSA: libpng |
 |
|
| Daniel Ahlberg wrote: | - - --------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200301-7
- - --------------------------------------------------------------------
PACKAGE : libpng
SUMMARY�: buffer overflow
DATE �� : 2003-01-08 15:01 UTC
EXPLOIT : remote
- - --------------------------------------------------------------------
- From Debian Security Advisory DSA 213-1:
"Glenn Randers-Pehrson discovered a problem in connection with 16-bit
samples from libpng, an interface for reading and writing PNG
(Portable Network Graphics) format files. The starting offsets for
the loops are calculated incorrectly which causes a buffer overrun
beyond the beginning of the row buffer."
Read the full advisory at
http://www.debian.org/security/2002/dsa-213
SOLUTION
It is recommended that all Gentoo Linux users who are running
media-libs/libpng-1.2.5-r1 or earlier update their systems as follows:
emerge rsync
emerge libpng
If you also have libpng-1.0.12-r1 or earlier installed update your
system as follows:
emerge \=media-libs/libpng-1.0.12-r2
Finish with:
emerge clean
- - --------------------------------------------------------------------
aliz@gentoo.org - GnuPG key is available at www.gentoo.org/~aliz
- - -------------------------------------------------------------------- |
Mailing List Archive: Unavailable
_________________
Quis separabit? Quo animo? |
|
News & Announcements
