Skip to content
OpenAdvisories
Unscored RHSA-2004:402 4 CVEs

Red Hat Security Advisory: libpng security update

Published Nov 5, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as libpng 2:1.2.2-25
Red Hat · RHEL 3 enterprise_linux:3::as libpng-debuginfo 2:1.2.2-25
Red Hat · RHEL 3 enterprise_linux:3::as libpng-devel 2:1.2.2-25
Red Hat · RHEL 3 enterprise_linux:3::as libpng10 0:1.0.13-15
Red Hat · RHEL 3 enterprise_linux:3::as libpng10-debuginfo 0:1.0.13-15
Red Hat · RHEL 3 enterprise_linux:3::as libpng10-devel 0:1.0.13-15
Red Hat · RHEL 3 enterprise_linux:3::desktop libpng 2:1.2.2-25
Red Hat · RHEL 3 enterprise_linux:3::desktop libpng-debuginfo 2:1.2.2-25
Red Hat · RHEL 3 enterprise_linux:3::desktop libpng-devel 2:1.2.2-25
Red Hat · RHEL 3 enterprise_linux:3::desktop libpng10 0:1.0.13-15
Red Hat · RHEL 3 enterprise_linux:3::desktop libpng10-debuginfo 0:1.0.13-15
Red Hat · RHEL 3 enterprise_linux:3::desktop libpng10-devel 0:1.0.13-15
Red Hat · RHEL 3 enterprise_linux:3::es libpng 2:1.2.2-25
Red Hat · RHEL 3 enterprise_linux:3::es libpng-debuginfo 2:1.2.2-25
Red Hat · RHEL 3 enterprise_linux:3::es libpng-devel 2:1.2.2-25
Red Hat · RHEL 3 enterprise_linux:3::es libpng10 0:1.0.13-15
Red Hat · RHEL 3 enterprise_linux:3::es libpng10-debuginfo 0:1.0.13-15
Red Hat · RHEL 3 enterprise_linux:3::es libpng10-devel 0:1.0.13-15
Red Hat · RHEL 3 enterprise_linux:3::ws libpng 2:1.2.2-25
Red Hat · RHEL 3 enterprise_linux:3::ws libpng-debuginfo 2:1.2.2-25
Red Hat · RHEL 3 enterprise_linux:3::ws libpng-devel 2:1.2.2-25
Red Hat · RHEL 3 enterprise_linux:3::ws libpng10 0:1.0.13-15
Red Hat · RHEL 3 enterprise_linux:3::ws libpng10-debuginfo 0:1.0.13-15
Red Hat · RHEL 3 enterprise_linux:3::ws libpng10-devel 0:1.0.13-15

Vulnerabilities 4

  • Unscored —
    CVE-2002-1363

    Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows rem…

  • Unscored —
    CVE-2004-0597 Public exploit EPSS 82%

    Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute …

  • Unscored —
    CVE-2004-0598

    The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (applicat…

  • Unscored —
    CVE-2004-0599

    Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) p…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=127869
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_402.json
  • report
    https://access.redhat.com/security/cve/CVE-2002-1363
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1616886
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2002-1363
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2002-1363
  • report
    https://access.redhat.com/security/cve/CVE-2004-0597
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617235
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0597
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0597
  • report
    https://access.redhat.com/security/cve/CVE-2004-0598
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617236
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0598
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0598
  • report
    https://access.redhat.com/security/cve/CVE-2004-0599
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617237
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-0599
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-0599