oss-security - Re: libpng-1.2.37 fixes a security issue

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Fri, 19 Jun 2009 18:05:47 -0400
From: "Michael S. Gilbert" <michael.s.gilbert@...il.com>
To: oss-security@...ts.openwall.com
Subject: Re: libpng-1.2.37 fixes a security issue

On Fri, 19 Jun 2009 16:59:36 -0500, Patrick J. Volkerding wrote:
> Hello,
> 
> libpng-1.2.37 has been released and the site says that it is a security 
> fix release (actually, 1.2.36 was as well, and 1.2.37 corrects the fix).
> 
> http://www.libpng.org/pub/png/libpng.html
> 
> I can't find a CVE on this, so somebody may need to assign one.

you're looking for CVE-2009-2042.

mike

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.