Advisories:rPSA-2009-0046

From rPath Wiki

rPath Security Advisory 2009-0046-1

Published: 2009-03-12

Products

• rPath Appliance Platform Linux Service 1
• rPath Appliance Platform Linux Service 2
• rPath Linux 1
• rPath Linux 2

Rating

Major

Exposure Level Classification

Indirect Deterministic Denial of Service

Updated Versions

• libpng=conary.rpath.com@rpl:1/1.2.35-0.1-1
• libpng=conary.rpath.com@rpl:2/1.2.35-0.1-1

rPath Issue Tracking System

• RPL-2985

References

• CVE-2008-6218
• CVE-2009-0040

Description

Previous versions of libpng are vulnerable to denial of service or

possibly arbitrary code execution attacks via buffer overflows

caused by a maliciously crafted PNG file.

Copyright 2009 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html