Keywords: Red Carpet libpng buffer overflow
libpng is a library used to create and manipulate PNG (Portable
The 1.2.4* and 1.0.14 releases of libpng solve a potential buffer
overflow vulnerability[1] in some functions related to progressive
image loading. Programs such as mozilla and various others use these
functions. An attacker could exploit this to remotely run arbitrary
code or crash an application by using a specially crafted png image.
These new releases also solve other minor bugs such as some memory
Since most applications which display images use libpng, this affects
many applications including Evolution and Mozilla. Additionally, Red
Carpet links libpng statically and needs to be updated separately.
Ximian only ships libpng on Solaris, and so we only have Solaris
packages available. When distribution vendors update their packages,
they will be available in Red Carpet. Please use Red Carpet to upgrade
libpng to 1.0.14 and Red Carpet 1.3.4-2. You can also get packages

from localhost (localhost [127.0.0.1])
	by phobos.labs.netnoteinc.com (Postfix) with ESMTP id B83EA440A8
	for <jm@localhost>; Wed,  7 Aug 2002 05:31:11 -0400 (EDT)
from phobos [127.0.0.1]
	by localhost with IMAP (fetchmail-5.9.0)
	for jm@localhost (single-drop); Wed, 07 Aug 2002 10:31:11 +0100 (IST)
from trna.ximian.com (trna.ximian.com [141.154.95.22]) by
    dogma.slashnull.org (8.11.6/8.11.6) with ESMTP id g779Rtk19671;
    Wed, 7 Aug 2002 10:27:56 +0100
from trna.ximian.com (localhost [127.0.0.1]) by trna.ximian.com
    (8.11.6/8.11.6) with ESMTP id g76LcM300402; Tue, 6 Aug 2002 17:38:22 -0400
from peabody.ximian.com (peabody.ximian.com [141.154.95.10]) by
    trna.ximian.com (8.11.6/8.11.6) with ESMTP id g76JfN319421 for
    <updates@ximian.com>; Tue, 6 Aug 2002 15:41:23 -0400
(qmail 13900 invoked from network); 6 Aug 2002 19:41:56 -0000
from localhost (127.0.0.1) by localhost with SMTP;
    6 Aug 2002 19:41:56 -0000
From updates-admin@ximian.com  Wed Aug  7 10:31:12 2002

protocol from AOL. Versions of Gaim prior to 0.58 contain a buffer
Please download Gaim 0.59 or later using Red Carpet. You may also