Skip to content
OpenAdvisories
Unscored RHSA-2009:0333 2 CVEs

Red Hat Security Advisory: libpng security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 40

ReleasePackageFixed in
Red Hat · RHEL 2 enterprise_linux:2.1::as libpng 2:1.0.14-12
Red Hat · RHEL 2 enterprise_linux:2.1::as libpng-devel 2:1.0.14-12
Red Hat · RHEL 2 enterprise_linux:2.1::aw libpng 2:1.0.14-12
Red Hat · RHEL 2 enterprise_linux:2.1::aw libpng-devel 2:1.0.14-12
Red Hat · RHEL 2 enterprise_linux:2.1::es libpng 2:1.0.14-12
Red Hat · RHEL 2 enterprise_linux:2.1::es libpng-devel 2:1.0.14-12
Red Hat · RHEL 2 enterprise_linux:2.1::ws libpng 2:1.0.14-12
Red Hat · RHEL 2 enterprise_linux:2.1::ws libpng-devel 2:1.0.14-12
Red Hat · RHEL 4 enterprise_linux:4::as libpng 2:1.2.7-3.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::as libpng-debuginfo 2:1.2.7-3.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::as libpng-devel 2:1.2.7-3.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::as libpng10 0:1.0.16-3.el4_7.3
Red Hat · RHEL 4 enterprise_linux:4::as libpng10-debuginfo 0:1.0.16-3.el4_7.3
Red Hat · RHEL 4 enterprise_linux:4::as libpng10-devel 0:1.0.16-3.el4_7.3
Red Hat · RHEL 4 enterprise_linux:4::desktop libpng 2:1.2.7-3.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::desktop libpng-debuginfo 2:1.2.7-3.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::desktop libpng-devel 2:1.2.7-3.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::desktop libpng10 0:1.0.16-3.el4_7.3
Red Hat · RHEL 4 enterprise_linux:4::desktop libpng10-debuginfo 0:1.0.16-3.el4_7.3
Red Hat · RHEL 4 enterprise_linux:4::desktop libpng10-devel 0:1.0.16-3.el4_7.3
Red Hat · RHEL 4 enterprise_linux:4::es libpng 2:1.2.7-3.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::es libpng-debuginfo 2:1.2.7-3.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::es libpng-devel 2:1.2.7-3.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::es libpng10 0:1.0.16-3.el4_7.3
Red Hat · RHEL 4 enterprise_linux:4::es libpng10-debuginfo 0:1.0.16-3.el4_7.3
Red Hat · RHEL 4 enterprise_linux:4::es libpng10-devel 0:1.0.16-3.el4_7.3
Red Hat · RHEL 4 enterprise_linux:4::ws libpng 2:1.2.7-3.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::ws libpng-debuginfo 2:1.2.7-3.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::ws libpng-devel 2:1.2.7-3.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::ws libpng10 0:1.0.16-3.el4_7.3
Red Hat · RHEL 4 enterprise_linux:4::ws libpng10-debuginfo 0:1.0.16-3.el4_7.3
Red Hat · RHEL 4 enterprise_linux:4::ws libpng10-devel 0:1.0.16-3.el4_7.3
Red Hat · RHEL 5 enterprise_linux:5::client libpng 2:1.2.10-7.1.el5_3.2
Red Hat · RHEL 5 enterprise_linux:5::client libpng-debuginfo 2:1.2.10-7.1.el5_3.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libpng 2:1.2.10-7.1.el5_3.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libpng-debuginfo 2:1.2.10-7.1.el5_3.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libpng-devel 2:1.2.10-7.1.el5_3.2
Red Hat · RHEL 5 enterprise_linux:5::server libpng 2:1.2.10-7.1.el5_3.2
Red Hat · RHEL 5 enterprise_linux:5::server libpng-debuginfo 2:1.2.10-7.1.el5_3.2
Red Hat · RHEL 5 enterprise_linux:5::server libpng-devel 2:1.2.10-7.1.el5_3.2

Vulnerabilities 2

  • Unscored —
    CVE-2008-1382

    libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attacke…

  • Unscored —
    CVE-2009-0040

    The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applicatio…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=441839
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=486355
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0333.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-1382
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1382
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1382
  • report
    https://access.redhat.com/security/cve/CVE-2009-0040
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0040
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0040