FINK-2004-08-04 Security Announcement - libpng3

"David H." <[email protected]> Thu, 05 Aug 2004 13:45:10 +0200
Newsgroups gmane.os.apple.fink.announce
Organization Fink Team
Message-ID <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

ID: FINK-2004-08-04
Reported:	2004-08-04
Updated:	2004-08-04

Package:	 libpng3, libpng3-shlibs
Affected:	 <= 1.2.5

Maintainer: 	Dave Morrison
Trees: 	10.3/stable, 10.3/unstable, 10.2-gcc3.3/stable, 10.2-gcc3.3/unstable
Mac OS X version:	 10.2, 10.3
Fix: 	upstream

Updated by: maintainer ([email protected])

Description: stack-based buffer overflow and other code concerns

References: CVE
Ref-URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0597
References: MISC
Ref-URL: http://scary.beasts.org/security/CESA-2004-001.txt
References: CERT-VN
Ref-URL: http://www.kb.cert.org/vuls/id/388984
References: CVE
Ref-URL:  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0598
References: MISC
Ref-URL: http://scary.beasts.org/security/CESA-2004-001.txt
References: CERT-VN
Ref-URL: http://www.kb.cert.org/vuls/id/236656
References: CVE
Ref-URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0599
References: MISC
Ref-URL: http://scary.beasts.org/security/CESA-2004-001.txt
References: CERT-VN
Ref-URL: http://www.kb.cert.org/vuls/id/160448
References: CERT-VN
Ref-URL: http://www.kb.cert.org/vuls/id/160448
References: CERT-VN
Ref-URL: http://www.kb.cert.org/vuls/id/477512

To verify the authenticity please visit
http://fink.sourceforge.net/doc/security/notification.php?phpLang=en#who
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.3.6 (Darwin)

iD8DBQFBEh23PMoaMn4kKR4RA7VyAJ4qCStS24XOaNHK4zWuYwuGgZj6KQCfSJoX
OOyc7ciasKKWuqMp2vuhofw=
=MCOM
-----END PGP SIGNATURE-----


-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com