[Bug 843190] New: CVE-2011-3464 libpng: One-byte stack buffer overrun in png_formatted_warning [fedora-17]

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=843190

            Bug ID: 843190
          Keywords: Security, SecurityTracking
            Blocks: 843179 (CVE-2011-3464)
        QA Contact: extras-qa(a)fedoraproject.org
          Severity: high
           Version: 17
          Priority: high
                CC: drizt(a)land.ru, erik-fedora(a)vanpienbroek.nl,
                    fedora-mingw(a)lists.fedoraproject.org,
                    ktietz(a)redhat.com, lfarkas(a)lfarkas.org,
                    rjones(a)redhat.com
          Assignee: rjones(a)redhat.com
           Summary: CVE-2011-3464  libpng: One-byte stack buffer overrun
                    in png_formatted_warning [fedora-17]
        Regression: ---
      Story Points: ---
    Classification: Fedora
                OS: Linux
          Reporter: kseifried(a)redhat.com
              Type: ---
     Documentation: ---
          Hardware: All
        Mount Type: ---
            Status: NEW
         Component: mingw-libpng
           Product: Fedora


This is an automatically created tracking bug!  It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.

For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.

For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs

When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs).  Please mention the CVE IDs being fixed
in the RPM changelog when available.

Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=843179

fedora-17 tracking bug for mingw-libpng: see blocks bug list for full details
of the security issue(s).

[bug automatically created by: add-tracking-bugs]

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 843190] CVE-2011-3464 libpng: One-byte stack buffer overrun in png_formatted_warning [fedora-17]

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=843190

Fedora Update System <updates(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |MODIFIED

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 843190] CVE-2011-3464 libpng: One-byte stack buffer overrun in png_formatted_warning [fedora-17]

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=843190

--- Comment #1 from Fedora Update System <updates(a)fedoraproject.org&gt; ---
mingw-libpng-1.5.13-1.fc18 has been submitted as an update for Fedora 18.
https://admin.fedoraproject.org/updates/mingw-libpng-1.5.13-1.fc18

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 843190] CVE-2011-3464 libpng: One-byte stack buffer overrun in png_formatted_warning [fedora-17]

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=843190

--- Comment #2 from Fedora Update System <updates(a)fedoraproject.org&gt; ---
mingw-libpng-1.5.13-1.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/mingw-libpng-1.5.13-1.fc17

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 843190] CVE-2011-3464 libpng: One-byte stack buffer overrun in png_formatted_warning [fedora-17]

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=843190

Fedora Update System <updates(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|MODIFIED                    |ON_QA

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 843190] CVE-2011-3464 libpng: One-byte stack buffer overrun in png_formatted_warning [fedora-17]

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=843190

--- Comment #3 from Fedora Update System <updates(a)fedoraproject.org&gt; ---
Package mingw-libpng-1.5.13-1.fc18:
* should fix your issue,
* was pushed to the Fedora 18 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing mingw-libpng-1.5.13-1.fc18'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-15592/mingw-libpng-1....
then log in and leave karma (feedback).

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 843190] CVE-2011-3464 libpng: One-byte stack buffer overrun in png_formatted_warning [fedora-17]

[Red Hat Bugzilla]

Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=843190

Fedora Update System <updates(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ON_QA                       |CLOSED
         Resolution|---                         |ERRATA
        Last Closed|                            |2012-12-20 11:09:06

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=BIYZfehvrl&a=cc_unsubscribe

[Bug 843190] CVE-2011-3464 libpng: One-byte stack buffer overrun in png_formatted_warning [fedora-17]

[Red Hat Bugzilla]

Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=843190

--- Comment #4 from Fedora Update System <updates(a)fedoraproject.org&gt; ---
mingw-libpng-1.5.13-1.fc18 has been pushed to the Fedora 18 stable repository. 
If problems still persist, please make note of it in this bug report.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=YVXgXPSBxA&a=cc_unsubscribe