-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[sflack-security] libpng (SFSA:2007-136-01)
New libpng packages are available for Sflack 11.0,
and -current to fix a security issue.
More details about this issue may be found in the Common
Vulnerabilities and Exposures (CVE) database:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2445
Here are the details from the Sflack 11.0 ChangeLog:
+--------------------------+
patches/packages/libpng-1.2.18-x86_64-1_sflack11.0.tgz:
Upgraded to libpng-1.2.18.
A grayscale PNG image with a malformed (bad CRC) tRNS chunk will crash some
libpng applications. This vulnerability has been assigned the identifiers
CVE-2007-2445 and CERT VU#684664.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2445
(* Security fix *)
+--------------------------+
Where to find the new packages:
+-----------------------------+
See the "Get Sflack" section on http://sflack.com for
additional mirror sites near you.
Updated package for Sflack 11.0:
ftp://ftp.sflack.com/pub/sflack/sflack-11.0/patches/packages/libpng-1.2.18-x86_64-1_sflack11.0.tgz
Updated package for Sflack -current:
ftp://ftp.sflack.com/pub/sflack/sflack-current/slackware/l/libpng-1.2.18-x86_64-1.tgz
MD5 signatures:
+-------------+
Sflack 11.0 package:
9fbdd2ccfd3c35a14bf4d17517190b1d libpng-1.2.18-x86_64-1_sflack11.0.tgz
Sflack -current package:
84d55b396a7e169ca5d86ba72c7b558b libpng-1.2.18-x86_64-1.tgz
Installation instructions:
+------------------------+
Upgrade the packages as root:
# upgradepkg libpng-1.2.18-x86_64-1_sflack11.0.tgz
+-----+
Sflack Linux Security Team
http://sflack.com/gpg-key
security at sflack.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
iD8DBQFGTAR0w79R6/xskD8RAgsKAJ9rGmwVBhrhQjWFzvLAj90XW3cCOACg7AHs
8yNUQvewOx0QRGYG6K0vkoI=
=fJww
-----END PGP SIGNATURE-----
Previous message: