--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-173 2004-06-18 --------------------------------------------------------------------- Product : Fedora Core 1 Name : libpng Version : 1.2.5 Release : 4 Summary : A library of functions for manipulating PNG image format files. Description : The libpng package contains a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng should be installed if you need to manipulate PNG format image files. --------------------------------------------------------------------- Update Information: During an audit of Red Hat Linux updates, the Fedora Legacy team found a security issue in libpng that had not been fixed in Fedora Core. An attacker could carefully craft a PNG file in such a way that it would cause an application linked to libpng to crash or potentially execute arbitrary code when opened by a victim. --------------------------------------------------------------------- --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/1/ 0824eaf1a7bda8624abffdf23c8e1cfd SRPMS/libpng-1.2.5-4.src.rpm 0d15484d8d0fe10aba3352d83d1a9856 x86_64/libpng-1.2.5-4.x86_64.rpm 682e673705a6c0752acf66dafc2fb235 x86_64/libpng-devel-1.2.5-4.x86_64.rpm 4c070a56703b15296c6d25c4a0bd45c7 x86_64/debug/libpng-debuginfo-1.2.5-4.x86_64.rpm be7033c0527158fe7ce64f3e6f0bcc30 x86_64/libpng-1.2.5-4.i386.rpm 0da44b75a2e7dc229135b7cecaea0f8b x86_64/libpng-devel-1.2.5-4.i386.rpm 72987036728beaf4393af2710e81816a x86_64/debug/libpng-debuginfo-1.2.5-4.i386.rpmbe7033c0527158fe7ce64f3e6f0bcc30 i386/libpng-1.2.5-4.i386.rpm 0da44b75a2e7dc229135b7cecaea0f8b i386/libpng-devel-1.2.5-4.i386.rpm 72987036728beaf4393af2710e81816a i386/debug/libpng-debuginfo-1.2.5-4.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. ---------------------------------------------------------------------
