| Summary: | libglpng1 is older than version in MDV 2010.2 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | |
| Severity: | normal | ||
| Priority: | Normal | CC: | davidwhodgins, dmorganec, fundawang, sysadmin-bugs, tmb |
| Version: | 1 | Keywords: | validated_update |
| Target Milestone: | --- | ||
| Hardware: | i586 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Source RPM: | libglpng-1.45-4.mga1.src.rpm | CVE: | |
| Status comment: | |||
|
Description
David Walser
2011-12-27 02:24:52 CET
This is due to a security patch that was added in the MDV package that was missed by Mageia. It is also missing in the Cauldron version of this package. The patch is available in Mandriva's SVN: http://svn.mandriva.com/svn/packages/cooker/libglpng/current/SOURCES/libglpng-1.45-CVE-2010-1519.diff
David Walser
2011-12-27 02:43:26 CET
Component:
RPM Packages =>
Security Hi, thanks for reporting this bug. As there is no maintainer for this package I added the committers in CC. (Please set the status to 'assigned' if you are working on it) CC:
(none) =>
dmorganec, fundawang The security advisory is here: http://lists.mandriva.com/security-announce/2010-09/msg00013.php
D Morgan
2011-12-28 03:35:13 CET
Assignee:
bugsquad =>
dmorganec
D Morgan
2011-12-28 03:44:45 CET
Status:
NEW =>
ASSIGNED Testing complete on i586 for the srpm libglpng-1.45-5.2.mga1.src.rpm No poc for the cve, so just testing that it works. According to urpmq --whatrequires libglpng1 the only package using this library is chromium. The game chromium-bsu works, so testing complete. CC:
(none) =>
davidwhodgins I can second Dave Hodgins' report that it works on i586 by playing chromium-bsu. Testing complete on x86_64 Advisory ------------- This update addresses the folloving CVE: - CVE-2010-1519 Multiple integer overflows in glpng.c in glpng 1.45 allow context-dependent attackers to execute arbitrary code via a crafted PNG image, related to (1) the pngLoadRawF function and (2) the pngLoadF function, leading to heap-based buffer overflows. ------------- SRPM: libglpng-1.45-5.2.mga1.src.rpm Could sysadmin please push from core/updates_testing to core/updates Thankyou! Keywords:
(none) =>
validated_update Update pushed. Status:
ASSIGNED =>
RESOLVED |