Secunia Logo
 
Debian update for libpng
Secunia Advisory: SA12221
Release Date: 2004-08-05
Popularity: 7,170 views

Critical:
Highly critical
Impact: DoS
System access
Where: From remote
Solution Status: Vendor Patch

OS:Debian GNU/Linux 3.0
Debian GNU/Linux unstable alias sid

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2004-0597
CVE-2004-0598
CVE-2004-0599
CVE-2004-0768


Description:
Debian has issued an update for libpng. This fixes multiple vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

For more information:
SA12219

A boundary error related to an older vulnerability, which can be exploited to cause a buffer overflow, has also been fixed.

Solution:
Apply updated packages.

-- Debian GNU/Linux 3.0 alias woody --

Source archives:

http://security.debian.org/pool/updat...bp/libpng/libpng_1.0.12-3.woody.7.dsc
Size/MD5 checksum: 579 28fa419216a24ee3bfc2379864cb08af
http://security.debian.org/pool/updat...ibpng/libpng_1.0.12-3.woody.7.diff.gz
Size/MD5 checksum: 9742 75a375a67bb78301d9a9ebe821b3f2b2
http://security.debian.org/pool/updat...libp/libpng/libpng_1.0.12.orig.tar.gz
Size/MD5 checksum: 481387 3329b745968e41f6f9e55a4d04a4964c
http://security.debian.org/pool/updat...libpng3/libpng3_1.2.1-1.1.woody.7.dsc
Size/MD5 checksum: 583 3976057544097db61b33f953b803d947
http://security.debian.org/pool/updat...ng3/libpng3_1.2.1-1.1.woody.7.diff.gz
Size/MD5 checksum: 29676 0501708a687b71e449f81cd3e61868d6
http://security.debian.org/pool/updat...ibp/libpng3/libpng3_1.2.1.orig.tar.gz
Size/MD5 checksum: 493105 75a21cbfae566158a0ac6d9f39087c4d

ARM architecture:

http://security.debian.org/pool/updat...bpng/libpng2_1.0.12-3.woody.7_arm.deb
Size/MD5 checksum: 108834 65c7d7fb818332e8c0a5948450289d6f
http://security.debian.org/pool/updat.../libpng2-dev_1.0.12-3.woody.7_arm.deb
Size/MD5 checksum: 241392 785d7cc63274c17c1b6f54020e55b047
http://security.debian.org/pool/updat.../libpng-dev_1.2.1-1.1.woody.7_arm.deb
Size/MD5 checksum: 247654 8fcf3de4c503230ec009cd60d852ed8e
http://security.debian.org/pool/updat...ng3/libpng3_1.2.1-1.1.woody.7_arm.deb
Size/MD5 checksum: 112036 159d56f98ca67efae5b941c8c125f7fb

Intel IA-32 architecture:

http://security.debian.org/pool/updat...png/libpng2_1.0.12-3.woody.7_i386.deb
Size/MD5 checksum: 107012 6c0c53769987b0e612315a27d426c31b
http://security.debian.org/pool/updat...libpng2-dev_1.0.12-3.woody.7_i386.deb
Size/MD5 checksum: 226982 93ab2de59fd31cdd270220a9bf470aab
http://security.debian.org/pool/updat...libpng-dev_1.2.1-1.1.woody.7_i386.deb
Size/MD5 checksum: 233652 7a723facf934ca726426fcccbea044c1
http://security.debian.org/pool/updat...g3/libpng3_1.2.1-1.1.woody.7_i386.deb
Size/MD5 checksum: 110350 aaa13f7b82894d332b0d93812eccf245

Intel IA-64 architecture:

http://security.debian.org/pool/updat...png/libpng2_1.0.12-3.woody.7_ia64.deb
Size/MD5 checksum: 147182 a42677c2dc15d9c7e69084c794adb1f1
http://security.debian.org/pool/updat...libpng2-dev_1.0.12-3.woody.7_ia64.deb
Size/MD5 checksum: 271760 3602ac433e9acb291264ac4631466b1b
http://security.debian.org/pool/updat...libpng-dev_1.2.1-1.1.woody.7_ia64.deb
Size/MD5 checksum: 278832 f40345e28c0a8090e3d5cc0da0c47c83
http://security.debian.org/pool/updat...g3/libpng3_1.2.1-1.1.woody.7_ia64.deb
Size/MD5 checksum: 151492 b4cf01f0f5a4584a9cc91d37059e3a18

HP Precision architecture:

http://security.debian.org/pool/updat...png/libpng2_1.0.12-3.woody.7_hppa.deb
Size/MD5 checksum: 128592 c290efcf7bca64a59b95df9bd40ea7c4
http://security.debian.org/pool/updat...libpng2-dev_1.0.12-3.woody.7_hppa.deb
Size/MD5 checksum: 262498 bba030d36b2453f50fc5f8dd502193db
http://security.debian.org/pool/updat...libpng-dev_1.2.1-1.1.woody.7_hppa.deb
Size/MD5 checksum: 269714 97f2cc65b004d72d2f736c444a5eca02
http://security.debian.org/pool/updat...g3/libpng3_1.2.1-1.1.woody.7_hppa.deb
Size/MD5 checksum: 132710 ad103af06ba1fd04bfc820a7c9469a04

Motorola 680x0 architecture:

http://security.debian.org/pool/updat...png/libpng2_1.0.12-3.woody.7_m68k.deb
Size/MD5 checksum: 103914 0397515db7b83fe0788c11878ff2f6fe
http://security.debian.org/pool/updat...libpng2-dev_1.0.12-3.woody.7_m68k.deb
Size/MD5 checksum: 220716 eedf1c5c86848604fffc678e2522047e
http://security.debian.org/pool/updat...libpng-dev_1.2.1-1.1.woody.7_m68k.deb
Size/MD5 checksum: 226396 825cf323e0b2a20d7059b41ac50b5ffe
http://security.debian.org/pool/updat...g3/libpng3_1.2.1-1.1.woody.7_m68k.deb
Size/MD5 checksum: 106862 c9426ed19e5cf9d5ffa3f4e5ad9575ba

Big endian MIPS architecture:

http://security.debian.org/pool/updat...png/libpng2_1.0.12-3.woody.7_mips.deb
Size/MD5 checksum: 108912 f28b7b28829c5eccfc1879bf24f30d01
http://security.debian.org/pool/updat...libpng2-dev_1.0.12-3.woody.7_mips.deb
Size/MD5 checksum: 240572 aa9f0be614c9b9e83035927bca2780a0
http://security.debian.org/pool/updat...libpng-dev_1.2.1-1.1.woody.7_mips.deb
Size/MD5 checksum: 247046 950eb986e2da18540cac6871fa724ec8
http://security.debian.org/pool/updat...g3/libpng3_1.2.1-1.1.woody.7_mips.deb
Size/MD5 checksum: 112238 45ba391f6604228a5712b3933cd7918d

Little endian MIPS architecture:

http://security.debian.org/pool/updat...g/libpng2_1.0.12-3.woody.7_mipsel.deb
Size/MD5 checksum: 108792 e1c23a58af661142d961b2cb9067a8ad
http://security.debian.org/pool/updat...bpng2-dev_1.0.12-3.woody.7_mipsel.deb
Size/MD5 checksum: 240484 205b79c80e9d5a90ba39ce297ca7ccf9
http://security.debian.org/pool/updat...bpng-dev_1.2.1-1.1.woody.7_mipsel.deb
Size/MD5 checksum: 247000 d7fab207f6240fa1c8cca2b626543910
http://security.debian.org/pool/updat.../libpng3_1.2.1-1.1.woody.7_mipsel.deb
Size/MD5 checksum: 112174 60c7d64b2256f05f8eb132b8e386731e

PowerPC architecture:

http://security.debian.org/pool/updat.../libpng2_1.0.12-3.woody.7_powerpc.deb
Size/MD5 checksum: 110254 ed1c9f3cb6cfc64467ae83251beb8b2d
http://security.debian.org/pool/updat...png2-dev_1.0.12-3.woody.7_powerpc.deb
Size/MD5 checksum: 234680 a728d61a234b60b14d6876c0d7d460b5
http://security.debian.org/pool/updat...png-dev_1.2.1-1.1.woody.7_powerpc.deb
Size/MD5 checksum: 240742 ae4b57d50f8f6e8f88f18fdfde81c9a8
http://security.debian.org/pool/updat...libpng3_1.2.1-1.1.woody.7_powerpc.deb
Size/MD5 checksum: 113340 3014018db3169c617d958b71fa0e119d

IBM S/390 architecture:

http://security.debian.org/pool/updat...png/libpng2_1.0.12-3.woody.7_s390.deb
Size/MD5 checksum: 110286 1ba753d363eb45b3b768ae26ce19f9dc
http://security.debian.org/pool/updat...libpng2-dev_1.0.12-3.woody.7_s390.deb
Size/MD5 checksum: 229436 8ca7796466613d780a3442d831544bf9
http://security.debian.org/pool/updat...libpng-dev_1.2.1-1.1.woody.7_s390.deb
Size/MD5 checksum: 235056 dcfc35ced743c453935dea5f4c6e8b92
http://security.debian.org/pool/updat...g3/libpng3_1.2.1-1.1.woody.7_s390.deb
Size/MD5 checksum: 113376 2a42876c22f968ae435382110d27741c

Sun Sparc architecture:

http://security.debian.org/pool/updat...ng/libpng2_1.0.12-3.woody.7_sparc.deb
Size/MD5 checksum: 110312 f5db28252e4072d07f34da1b57bb2656
http://security.debian.org/pool/updat...ibpng2-dev_1.0.12-3.woody.7_sparc.deb
Size/MD5 checksum: 232132 32be4f2a4f7215f3760ac6ce7c222ab9
http://security.debian.org/pool/updat...ibpng-dev_1.2.1-1.1.woody.7_sparc.deb
Size/MD5 checksum: 237786 2d36e99aab38db959088a646bbf9455b
http://security.debian.org/pool/updat...3/libpng3_1.2.1-1.1.woody.7_sparc.deb
Size/MD5 checksum: 113744 d67df8af224bbcb817c7cb004ece5bf7


-- Debian GNU/Linux unstable alias sid --

The vulnerabilities will reportedly be fixed soon.

Original Advisory:
http://lists.debian.org/debian-securi...-security-announce-2004/msg00139.html

Other References:
SA12219:
http://secunia.com/advisories/12219/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Symantec Backup Exec for Windows Servers Multiple Vulnerabilities // 60 views
2. imlib2 XPM Processing Buffer Overflow Vulnerability // 46 views
3. HP OpenView Network Node Manager Cross-Site Scripting Vulnerabilities // 40 views
4. Sun Java JDK / JRE Multiple Vulnerabilities // 39 views
5. pam_mount "passwdehd" Insecure Temporary Files // 37 views
6. refbase "headerMsg" Cross-Site Scripting Vulnerability // 36 views
7. P3nfs Insecure Temporary Files // 35 views
8. SystemImager "si_mkbootserver" Insecure Temporary Files // 35 views
9. Alex Multiple Products File Upload Vulnerability // 34 views
10. MailScanner "trend-autoupdate" Insecure Temporary Files // 34 views