[El-errata] ELSA-2011-1103 Moderate: Oracle Linux 4 libpng security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2011-1103

https://rhn.redhat.com/errata/RHSA-2011-1103.html

The following updated rpms for Oracle Linux 4 have been uploaded to the 
Unbreakable Linux Network:

i386:
libpng-1.2.7-8.el4.i386.rpm
libpng-devel-1.2.7-8.el4.i386.rpm
libpng10-1.0.16-9.el4.i386.rpm
libpng10-devel-1.0.16-9.el4.i386.rpm

x86_64:
libpng-1.2.7-8.el4.i386.rpm
libpng-1.2.7-8.el4.x86_64.rpm
libpng-devel-1.2.7-8.el4.x86_64.rpm
libpng10-1.0.16-9.el4.i386.rpm
libpng10-1.0.16-9.el4.x86_64.rpm
libpng10-devel-1.0.16-9.el4.x86_64.rpm

ia64:
libpng-1.2.7-8.el4.i386.rpm
libpng-1.2.7-8.el4.ia64.rpm
libpng-devel-1.2.7-8.el4.ia64.rpm
libpng10-1.0.16-9.el4.i386.rpm
libpng10-1.0.16-9.el4.ia64.rpm
libpng10-devel-1.0.16-9.el4.ia64.rpm


SRPMS:
http://oss.oracle.com/el4/SRPMS-updates/libpng-1.2.7-8.el4.src.rpm
http://oss.oracle.com/el4/SRPMS-updates/libpng10-1.0.16-9.el4.src.rpm


Description of changes:

libpng:

[2:1.2.7-8]
- Remove incorrect fix for CVE-2011-2690; that bug doesn't exist in 1.2.7
Resolves: #721302

[2:1.2.7-7]
- Back-port fixes for CVE-2011-2690, CVE-2011-2692
  Note: CVE-2011-2691, announced at the same time, does not apply to 1.2.7;
  likewise for CVE-2011-2501
Resolves: #721302

libpng10:

[1.0.16-9]
- Remove incorrect fix for CVE-2011-2690; that bug doesn't exist in 1.0.16
Resolves: #721308

[1.0.16-8]
- Back-port fixes for CVE-2011-2690, CVE-2011-2692
  Note: CVE-2011-2691, announced at the same time, does not apply to 1.0.16;
  likewise for CVE-2011-2501
Resolves: #721308