New subject: [Bug 1086672] CVE-2013-7353 mingw32-libpng: libpng: integer overflow leading to a heap-based buffer overflow in png_set_unknown_chunks() [epel-5]

Friday, 11 April 2014

https://bugzilla.redhat.com/show_bug.cgi?id=1086672

            Bug ID: 1086672
           Summary: CVE-2013-7353 mingw32-libpng: libpng: integer overflow
                    leading to a heap-based buffer overflow in
                    png_set_unknown_chunks() [epel-5]
           Product: Fedora EPEL
           Version: el5
         Component: mingw32-libpng
          Keywords: Security, SecurityTracking
          Severity: medium
          Priority: medium
          Assignee: rjones(a)redhat.com
          Reporter: huzaifas(a)redhat.com
        QA Contact: extras-qa(a)fedoraproject.org
                CC: drizt(a)land.ru, fedora-mingw(a)lists.fedoraproject.org,
                    ktietz(a)redhat.com, lfarkas(a)lfarkas.org,
                    rjones(a)redhat.com
            Blocks: 1086514 (CVE-2013-7353)

This is an automatically created tracking bug!  It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.

For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks"
field.

For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs

When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s).  This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.

Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.

epel-5 tracking bug for mingw32-libpng: see blocks bug list for full details of
the security issue(s).

[bug automatically created by: add-tracking-bugs]

Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1086514
[Bug 1086514] CVE-2013-7353 libpng: integer overflow leading to a
heap-based buffer overflow in png_set_unknown_chunks()
-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=6KlN9Qp94F&a=cc_unsubscribe

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

[Bug 1086672] New: CVE-2013-7353 mingw32-libpng: libpng: integer overflow leading to a heap-based buffer overflow in png_set_unknown_chunks() [epel-5]