Libpng Library 'png_handle_tEXt()' Memory Leak Denial of Service Vulnerability

Bugtraq ID:	31920
Class:	Unknown
CVE:	CVE-2008-6218
Remote:	Yes
Local:	No
Published:	Sep 18 2008 12:00AM
Updated:	Apr 13 2015 10:13PM
Credit:	libpng
Vulnerable:	rPath rPath Linux 2 rPath rPath Linux 1 rPath Appliance Platform Linux Service 2 rPath Appliance Platform Linux Service 1 Pardus Linux 2008 0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 libpng libpng3 1.2.32 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	libpng libpng3 1.2.33 rc02

Libpng Library 'png_handle_tEXt()' Memory Leak Denial of Service Vulnerability

The 'libpng' library is prone to a remote denial-of-service vulnerability because it fails to handle malicious PNG files.

Successful exploits may allow remote attackers to cause denial-of-service conditions on computers running the affected library.

This issue affects 'libpng' 1.2.32; other versions may also be affected.

Libpng Library 'png_handle_tEXt()' Memory Leak Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Libpng Library 'png_handle_tEXt()' Memory Leak Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the references for more information.


Debian Linux 4.0 arm

• Debian libpng12-0-udeb_1.2.15~beta5-1+etch2_arm.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.15~beta5-1+etch2_arm.udeb


• Debian libpng12-0_1.2.15~beta5-1+etch2_arm.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.15~beta5-1+etch2_arm.deb


• Debian libpng12-dev_1.2.15~beta5-1+etch2_arm.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.15~beta5-1+etch2_arm.deb


• Debian libpng3_1.2.15~beta5-1+etch2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.1 5~beta5-1+etch2_all.deb

Debian Linux 5.0 ia-64

• Debian libpng12-0-udeb_1.2.27-2+lenny2_ia64.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.27-2+lenny2_ia64.udeb


• Debian libpng12-0_1.2.27-2+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.27-2+lenny2_ia64.deb


• Debian libpng12-dev_1.2.27-2+lenny2_ia64.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.27-2+lenny2_ia64.deb


• Debian libpng3_1.2.27-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.2 7-2+lenny2_all.deb

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva lib64png-devel-1.2.35-1.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png-static-devel-1.2.35-1.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png3-1.2.35-1.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-source-1.2.35-1.2mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 powerpc

• Debian libpng12-0-udeb_1.2.15~beta5-1+etch2_powerpc.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.15~beta5-1+etch2_powerpc.udeb


• Debian libpng12-0_1.2.15~beta5-1+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.15~beta5-1+etch2_powerpc.deb


• Debian libpng12-dev_1.2.15~beta5-1+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.15~beta5-1+etch2_powerpc.deb


• Debian libpng3_1.2.15~beta5-1+etch2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.1 5~beta5-1+etch2_all.deb

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva lib64png-devel-1.2.31-2.3mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png-static-devel-1.2.31-2.3mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png3-1.2.31-2.3mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-source-1.2.31-2.3mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 m68k

• Debian libpng3_1.2.15~beta5-1+etch2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.1 5~beta5-1+etch2_all.deb

Debian Linux 5.0 alpha

• Debian libpng12-0-udeb_1.2.27-2+lenny2_alpha.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.27-2+lenny2_alpha.udeb


• Debian libpng12-0_1.2.27-2+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.27-2+lenny2_alpha.deb


• Debian libpng12-dev_1.2.27-2+lenny2_alpha.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.27-2+lenny2_alpha.deb


• Debian libpng3_1.2.27-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.2 7-2+lenny2_all.deb

Debian Linux 5.0 ia-32

• Debian libpng12-0-udeb_1.2.27-2+lenny2_i386.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.27-2+lenny2_i386.udeb


• Debian libpng12-0_1.2.27-2+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.27-2+lenny2_i386.deb


• Debian libpng12-dev_1.2.27-2+lenny2_i386.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.27-2+lenny2_i386.deb


• Debian libpng3_1.2.27-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.2 7-2+lenny2_all.deb

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva htmldoc-1.8.27-1.2mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva htmldoc-nogui-1.8.27-1.2mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png-devel-1.2.22-0.5mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png-static-devel-1.2.22-0.5mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png3-1.2.22-0.5mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64xulrunner-devel-1.9.2.6-0.2mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64xulrunner1.9.2.6-1.9.2.6-0.2mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-source-1.2.22-0.5mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mozilla-thunderbird-3.0.5-0.2mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mozilla-thunderbird-enigmail-3.0.5-0.2mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva nsinstall-3.0.5-0.2mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva xulrunner-1.9.2.6-0.2mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5

• Mandriva libpng-devel-1.2.31-2.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-source-1.2.31-2.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-static-devel-1.2.31-2.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng3-1.2.31-2.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian libpng12-0-udeb_1.2.27-2+lenny2_s390.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.27-2+lenny2_s390.udeb


• Debian libpng12-0_1.2.27-2+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.27-2+lenny2_s390.deb


• Debian libpng12-dev_1.2.27-2+lenny2_s390.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.27-2+lenny2_s390.deb


• Debian libpng3_1.2.27-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.2 7-2+lenny2_all.deb

Mandriva Linux Mandrake 2008.0

• Mandriva htmldoc-1.8.27-1.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva htmldoc-nogui-1.8.27-1.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-devel-1.2.22-0.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-source-1.2.22-0.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-static-devel-1.2.22-0.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng3-1.2.22-0.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxulrunner-devel-1.9.2.6-0.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libxulrunner1.9.2.6-1.9.2.6-0.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mozilla-thunderbird-3.0.5-0.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mozilla-thunderbird-enigmail-3.0.5-0.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva nsinstall-3.0.5-0.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva xulrunner-1.9.2.6-0.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva lib64png-devel-1.2.43-1.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png-static-devel-1.2.43-1.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png3-1.2.43-1.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-source-1.2.43-1.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mipsel

• Debian libpng12-0-udeb_1.2.27-2+lenny2_mipsel.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.27-2+lenny2_mipsel.udeb


• Debian libpng12-0_1.2.27-2+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.27-2+lenny2_mipsel.deb


• Debian libpng12-dev_1.2.27-2+lenny2_mipsel.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.27-2+lenny2_mipsel.deb


• Debian libpng3_1.2.27-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.2 7-2+lenny2_all.deb

Mandriva Linux Mandrake 2010.0

• Mandriva libpng-devel-1.2.40-1.2mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-source-1.2.40-1.2mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-static-devel-1.2.40-1.2mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng3-1.2.40-1.2mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 amd64

• Debian libpng12-0-udeb_1.2.15~beta5-1+etch2_amd64.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.15~beta5-1+etch2_amd64.udeb


• Debian libpng12-0_1.2.15~beta5-1+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.15~beta5-1+etch2_amd64.deb


• Debian libpng12-dev_1.2.15~beta5-1+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.15~beta5-1+etch2_amd64.deb


• Debian libpng3_1.2.15~beta5-1+etch2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.1 5~beta5-1+etch2_all.deb

Mandriva Linux Mandrake 2010.0 x86_64

• Mandriva lib64png-devel-1.2.40-1.2mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png-static-devel-1.2.40-1.2mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png3-1.2.40-1.2mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-source-1.2.40-1.2mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 ia-32

• Debian libpng12-0-udeb_1.2.15~beta5-1+etch2_i386.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.15~beta5-1+etch2_i386.udeb


• Debian libpng12-0_1.2.15~beta5-1+etch2_i386.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.15~beta5-1+etch2_i386.deb


• Debian libpng12-dev_1.2.15~beta5-1+etch2_i386.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.15~beta5-1+etch2_i386.deb


• Debian libpng3_1.2.15~beta5-1+etch2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.1 5~beta5-1+etch2_all.deb

Debian Linux 5.0 hppa

• Debian libpng12-0-udeb_1.2.27-2+lenny2_hppa.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.27-2+lenny2_hppa.udeb


• Debian libpng12-0_1.2.27-2+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.27-2+lenny2_hppa.deb


• Debian libpng12-dev_1.2.27-2+lenny2_hppa.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.27-2+lenny2_hppa.deb


• Debian libpng3_1.2.27-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.2 7-2+lenny2_all.deb

Debian Linux 4.0 hppa

• Debian libpng12-0-udeb_1.2.15~beta5-1+etch2_hppa.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.15~beta5-1+etch2_hppa.udeb


• Debian libpng12-0_1.2.15~beta5-1+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.15~beta5-1+etch2_hppa.deb


• Debian libpng12-dev_1.2.15~beta5-1+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.15~beta5-1+etch2_hppa.deb


• Debian libpng3_1.2.15~beta5-1+etch2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.1 5~beta5-1+etch2_all.deb

Debian Linux 4.0 sparc

• Debian libpng12-0-udeb_1.2.15~beta5-1+etch2_sparc.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.15~beta5-1+etch2_sparc.udeb


• Debian libpng12-0_1.2.15~beta5-1+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.15~beta5-1+etch2_sparc.deb


• Debian libpng12-dev_1.2.15~beta5-1+etch2_sparc.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.15~beta5-1+etch2_sparc.deb


• Debian libpng3_1.2.15~beta5-1+etch2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.1 5~beta5-1+etch2_all.deb

Debian Linux 4.0 s/390

• Debian libpng12-0-udeb_1.2.15~beta5-1+etch2_s390.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.15~beta5-1+etch2_s390.udeb


• Debian libpng12-0_1.2.15~beta5-1+etch2_s390.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.15~beta5-1+etch2_s390.deb


• Debian libpng12-dev_1.2.15~beta5-1+etch2_s390.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.15~beta5-1+etch2_s390.deb


• Debian libpng3_1.2.15~beta5-1+etch2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.1 5~beta5-1+etch2_all.deb

Mandriva Linux Mandrake 2010.1

• Mandriva libpng-devel-1.2.43-1.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-source-1.2.43-1.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-static-devel-1.2.43-1.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng3-1.2.43-1.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 m68k

• Debian libpng3_1.2.27-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.2 7-2+lenny2_all.deb

Mandriva Linux Mandrake 2009.0

• Mandriva libpng-devel-1.2.31-2.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-source-1.2.31-2.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-static-devel-1.2.31-2.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng3-1.2.31-2.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 arm

• Debian libpng12-0-udeb_1.2.27-2+lenny2_arm.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.27-2+lenny2_arm.udeb


• Debian libpng12-0_1.2.27-2+lenny2_arm.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.27-2+lenny2_arm.deb


• Debian libpng12-dev_1.2.27-2+lenny2_arm.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.27-2+lenny2_arm.deb


• Debian libpng3_1.2.27-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.2 7-2+lenny2_all.deb

Debian Linux 4.0 alpha

• Debian libpng12-0-udeb_1.2.15~beta5-1+etch2_alpha.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.15~beta5-1+etch2_alpha.udeb


• Debian libpng12-0_1.2.15~beta5-1+etch2_alpha.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.15~beta5-1+etch2_alpha.deb


• Debian libpng12-dev_1.2.15~beta5-1+etch2_alpha.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.15~beta5-1+etch2_alpha.deb


• Debian libpng3_1.2.15~beta5-1+etch2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.1 5~beta5-1+etch2_all.deb

Debian Linux 4.0 armel

• Debian libpng3_1.2.15~beta5-1+etch2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.1 5~beta5-1+etch2_all.deb

Debian Linux 5.0 armel

• Debian libpng12-0-udeb_1.2.27-2+lenny2_armel.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.27-2+lenny2_armel.udeb


• Debian libpng12-0_1.2.27-2+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.27-2+lenny2_armel.deb


• Debian libpng12-dev_1.2.27-2+lenny2_armel.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.27-2+lenny2_armel.deb


• Debian libpng3_1.2.27-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.2 7-2+lenny2_all.deb

Debian Linux 5.0

• Debian libpng3_1.2.27-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.2 7-2+lenny2_all.deb

MandrakeSoft Corporate Server 4.0

• Mandriva htmldoc-1.8.23-8.2.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva htmldoc-nogui-1.8.23-8.2.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng3-1.2.8-1.8.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng3-devel-1.2.8-1.8.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng3-static-devel-1.2.8-1.8.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0

• Debian libpng3_1.2.15~beta5-1+etch2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.1 5~beta5-1+etch2_all.deb

Debian Linux 4.0 mipsel

• Debian libpng12-0-udeb_1.2.15~beta5-1+etch2_mipsel.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.15~beta5-1+etch2_mipsel.udeb


• Debian libpng12-0_1.2.15~beta5-1+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.15~beta5-1+etch2_mipsel.deb


• Debian libpng12-dev_1.2.15~beta5-1+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.15~beta5-1+etch2_mipsel.deb


• Debian libpng3_1.2.15~beta5-1+etch2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.1 5~beta5-1+etch2_all.deb

Debian Linux 5.0 amd64

• Debian libpng12-0-udeb_1.2.27-2+lenny2_amd64.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.27-2+lenny2_amd64.udeb


• Debian libpng12-0_1.2.27-2+lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.27-2+lenny2_amd64.deb


• Debian libpng12-dev_1.2.27-2+lenny2_amd64.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.27-2+lenny2_amd64.deb


• Debian libpng3_1.2.27-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.2 7-2+lenny2_all.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva lib64png-devel-1.2.31-2.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png-static-devel-1.2.31-2.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png3-1.2.31-2.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-source-1.2.31-2.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

• Debian libpng12-0-udeb_1.2.27-2+lenny2_mips.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.27-2+lenny2_mips.udeb


• Debian libpng12-0_1.2.27-2+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.27-2+lenny2_mips.deb


• Debian libpng12-dev_1.2.27-2+lenny2_mips.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.27-2+lenny2_mips.deb


• Debian libpng3_1.2.27-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.2 7-2+lenny2_all.deb

Mandriva Linux Mandrake 2009.1

• Mandriva libpng-devel-1.2.35-1.2mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-source-1.2.35-1.2mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng-static-devel-1.2.35-1.2mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libpng3-1.2.35-1.2mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 powerpc

• Debian libpng12-0-udeb_1.2.27-2+lenny2_powerpc.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.27-2+lenny2_powerpc.udeb


• Debian libpng12-0_1.2.27-2+lenny2_powerpc.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.27-2+lenny2_powerpc.deb


• Debian libpng12-dev_1.2.27-2+lenny2_powerpc.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.27-2+lenny2_powerpc.deb


• Debian libpng3_1.2.27-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.2 7-2+lenny2_all.deb

Debian Linux 4.0 ia-64

• Debian libpng12-0-udeb_1.2.15~beta5-1+etch2_ia64.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.15~beta5-1+etch2_ia64.udeb


• Debian libpng12-0_1.2.15~beta5-1+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.15~beta5-1+etch2_ia64.deb


• Debian libpng12-dev_1.2.15~beta5-1+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.15~beta5-1+etch2_ia64.deb


• Debian libpng3_1.2.15~beta5-1+etch2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.1 5~beta5-1+etch2_all.deb

Debian Linux 4.0 mips

• Debian libpng12-0-udeb_1.2.15~beta5-1+etch2_mips.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.15~beta5-1+etch2_mips.udeb


• Debian libpng12-0_1.2.15~beta5-1+etch2_mips.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.15~beta5-1+etch2_mips.deb


• Debian libpng12-dev_1.2.15~beta5-1+etch2_mips.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.15~beta5-1+etch2_mips.deb


• Debian libpng3_1.2.15~beta5-1+etch2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.1 5~beta5-1+etch2_all.deb

Debian Linux 5.0 sparc

• Debian libpng12-0-udeb_1.2.27-2+lenny2_sparc.udeb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0-ud eb_1.2.27-2+lenny2_sparc.udeb


• Debian libpng12-0_1.2.27-2+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-0_1. 2.27-2+lenny2_sparc.deb


• Debian libpng12-dev_1.2.27-2+lenny2_sparc.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng12-dev_ 1.2.27-2+lenny2_sparc.deb


• Debian libpng3_1.2.27-2+lenny2_all.deb
  http://security.debian.org/pool/updates/main/libp/libpng/libpng3_1.2.2 7-2+lenny2_all.deb

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva htmldoc-1.8.23-8.2.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva htmldoc-nogui-1.8.23-8.2.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png3-1.2.8-1.8.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png3-devel-1.2.8-1.8.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64png3-static-devel-1.2.8-1.8.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

Libpng Library 'png_handle_tEXt()' Memory Leak Denial of Service Vulnerability

References:

• libpng 1.2.33rc02 Release Notes (libpng)
  
• libpng Homepage (libpng)