Red Hat Security AdvisoryRHSA-2015:2594
libpng security update
Released 2015-12-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libpng-2:1.2.49-2.el6_7
- Red Hat Enterprise Linux Desktop Optional (v. 6) libpng-devel-2:1.2.49-2.el6_7, libpng-static-2:1.2.49-2.el6_7
- Red Hat Enterprise Linux HPC Node (v. 6) libpng-2:1.2.49-2.el6_7
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libpng-devel-2:1.2.49-2.el6_7, libpng-static-2:1.2.49-2.el6_7
- Red Hat Enterprise Linux Server (v. 6) libpng-2:1.2.49-2.el6_7, libpng-2:1.2.49-2.el6_7.ppc, libpng-devel-2:1.2.49-2.el6_7 +1
- Red Hat Enterprise Linux Server Optional (v. 6) libpng-static-2:1.2.49-2.el6_7
- Red Hat Enterprise Linux Workstation (v. 6) libpng-2:1.2.49-2.el6_7, libpng-devel-2:1.2.49-2.el6_7
- Red Hat Enterprise Linux Workstation Optional (v. 6) libpng-static-2:1.2.49-2.el6_7
Fixes 3 records
Priority MEDIUM 45
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow r…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.10339 · Published 2015-11-13 · Partial fix CWE-120
Priority MEDIUM 41
Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of s…
CVSS 3.0HIGH 7.3· Network · No auth · No interaction · EPSS 0.06054 · Published 2016-01-21 · Partial fix CWE-119
Priority LOW 32
The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06359 · Published 2015-11-24 · Partial fix CWE-200
THREATIST.IORead the docs