- -------------------------------------------------------------------------- Debian-Edu/Skolelinux Security Advisory DESA 2004-013 http://www.skolelinux.no/security/ Morten Werner Olsen August 29, 2004 debian-edu-security@lists.alioth.debian.org - -------------------------------------------------------------------------- Package : libpng Vulnerability : several Problem-Type : remote Need reboot : no Debian-Edu-specific : no CVE ID : CAN-2004-0597, CAN-2004-0598, CAN-2004-0599, CAN-2004-0768 DSA ID : DSA-536-1 Chris Evans discovered several vulnerabilities in libpng. These include multiple buffer overflows, NULL pointer dereferences and integer overflows. We recommend that you upgrade your libpng packages. Upgrade Instructions - -------------------- Make sure the line deb http://security.debian.org/ stable/updates main contrib non-free is present in your /etc/apt/sources.list and run 'apt-get update' to update your package lists. Then run 'apt-get install libpng2' to upgrade your libpng package. - -------------------------------------------------------------------------- Mailing list: bruker@skolelinux.no, debian-edu@lists.debian.org, linuxiskolen@skolelinux.no, user@skolelinux.de Package info: `apt-cache show <pkg>'
Attachment:
signature.asc
Description: Digital signature