Image flaw pierces PC security

[zjimward]

Vulnerabilities in PNG image format libpng. Patches have been released, so we should get these soon for Fedora.

http://news.com.com/Image+flaw+pierc...3-5298999.html

[foolish]

Already fixed and updates are in updates-released. Update everyone!

[Jman]

Among the programs that use libPNG and are likely to be affected by the flaws are the Mail application on Apple Computer's Mac OS X, the Opera and Internet Explorer browsers on Windows, and the Mozilla and Netscape browsers on Solaris, according to independent security researcher Chris Evans, who discovered the issues.

This affects many people.

The Mozilla Foundation, the group that manages development of the Mozilla and Firefox browsers and the Thunderbird e-mail client, patched the flaws Wednesday, the same day news of the vulnerabilities was made public. Microsoft continues to study the issue, a representative of the software giant said late Thursday.

"Microsoft has not been made aware of any active exploits of the reported vulnerability or customer impact at this time, but is aggressively investigating the public reports," the representative said.

I love it how Mozilla gets out same day fixes.