libpng 보안 업데이트
Web Browser 로는 FTP 접속이 불가능 합니다.
문서번호 : 1085599309
업데이트 : 2004.05.27
상세내용
Updated libpng packages that fix a out of bounds memory access are now
available.
The libpng package contains a library of functions for creating and
manipulating PNG (Portable Network Graphics) image format files.
Steve Grubb discovered a out of bounds memory access flaw in libpng. An
attacker could carefully craft a PNG file in such a way that it would cause
an application linked to libpng to crash when opened by a victim. This
issue may not be used to execute arbitrary code.
Users are advised to upgrade to these updated packages that contain a
backported security fix not vulnerable to this issue.
Autoupdates 지원 : 지원
update 패키지
RPMS :
. libpng-1.0.14-3.i686.rpm
. libpng-devel-1.0.14-3.i686.rpm
SRPMS :
. libpng-1.0.14-3.src.rpm
참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0421
|