MDVSA-2010:179

Package name
libglpng
Date
2010-09-12
Advisory ID
MDVSA-2010:179
Affected versions
2010.0 x86_64 , 2010.1 i586 , 2010.0 i586 , 2009.1 i586 , 2009.1 x86_64 , 2010.1 x86_64

Problem description

A vulnerability has been found and corrected in libglpng:

Multiple integer overflows in glpng.c in glpng 1.45 allow
context-dependent attackers to execute arbitrary code via a crafted
PNG image, related to (1) the pngLoadRawF function and (2) the pngLoadF
function, leading to heap-based buffer overflows (CVE-2010-1519).

The updated packages have been patched to correct this issue.

Updated packages

2010.0 x86_64

 d3c492efd72e38c5f1e2b10fbba625ba  2010.0/x86_64/lib64glpng1-1.45-4.1mdv2010.0.x86_64.rpm
 497e18abc0f28b26efc870a7f0c447e0  2010.0/x86_64/lib64glpng-devel-1.45-4.1mdv2010.0.x86_64.rpm 
 caf1ba944ae5024ab75b8836ad785a6c  2010.0/SRPMS/libglpng-1.45-4.1mdv2010.0.src.rpm

2010.1 i586

 390683a975721076f81ac4432d232e33  2010.1/i586/libglpng1-1.45-4.1mdv2010.1.i586.rpm
 3f38215f4a4868df76510aad48bf56b5  2010.1/i586/libglpng-devel-1.45-4.1mdv2010.1.i586.rpm 
 61d2140ccc78edc76e01304ce16ea2e3  2010.1/SRPMS/libglpng-1.45-4.1mdv2010.1.src.rpm

2010.0 i586

 159297cbcbe23bba381467e50a437de0  2010.0/i586/libglpng1-1.45-4.1mdv2010.0.i586.rpm
 2b8206baadd12a11c3050cdb84ae4422  2010.0/i586/libglpng-devel-1.45-4.1mdv2010.0.i586.rpm 
 caf1ba944ae5024ab75b8836ad785a6c  2010.0/SRPMS/libglpng-1.45-4.1mdv2010.0.src.rpm

2009.1 i586

 effe46c6972c268adc41f31c505b2583  2009.1/i586/libglpng1-1.45-3.1mdv2009.1.i586.rpm
 b0a442c8635938b895b8e6c6a8091cf4  2009.1/i586/libglpng-devel-1.45-3.1mdv2009.1.i586.rpm 
 7ae881706d3486227db31b3bee09679e  2009.1/SRPMS/libglpng-1.45-3.1mdv2009.1.src.rpm

2009.1 x86_64

 b352cb371a7d11d25e3c4d0544fddb54  2009.1/x86_64/lib64glpng1-1.45-3.1mdv2009.1.x86_64.rpm
 809d9effac6266699cbb10dad0a95e24  2009.1/x86_64/lib64glpng-devel-1.45-3.1mdv2009.1.x86_64.rpm 
 7ae881706d3486227db31b3bee09679e  2009.1/SRPMS/libglpng-1.45-3.1mdv2009.1.src.rpm

2010.1 x86_64

 33df7a987a7c19af5859c359d9a374cd  2010.1/x86_64/lib64glpng1-1.45-4.1mdv2010.1.x86_64.rpm
 a8813040f820ca8b254233c136da946f  2010.1/x86_64/lib64glpng-devel-1.45-4.1mdv2010.1.x86_64.rpm 
 61d2140ccc78edc76e01304ce16ea2e3  2010.1/SRPMS/libglpng-1.45-4.1mdv2010.1.src.rpm

References