Red Hat Security AdvisoryRHSA-2015:2596
libpng security update
Released 2015-12-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libpng-2:1.5.13-7.el7_2
- Red Hat Enterprise Linux Client Optional (v. 7) libpng-devel-2:1.5.13-7.el7_2, libpng-static-2:1.5.13-7.el7_2
- Red Hat Enterprise Linux ComputeNode (v. 7) libpng-2:1.5.13-7.el7_2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libpng-devel-2:1.5.13-7.el7_2, libpng-static-2:1.5.13-7.el7_2
- Red Hat Enterprise Linux Server (v. 7) libpng-2:1.5.13-7.el7_2, libpng-2:1.5.13-7.el7_2.ppc, libpng-devel-2:1.5.13-7.el7_2 +1
- Red Hat Enterprise Linux Server Optional (v. 7) libpng-static-2:1.5.13-7.el7_2, libpng-static-2:1.5.13-7.el7_2.ppc
- Red Hat Enterprise Linux Workstation (v. 7) libpng-2:1.5.13-7.el7_2, libpng-devel-2:1.5.13-7.el7_2
- Red Hat Enterprise Linux Workstation Optional (v. 7) libpng-static-2:1.5.13-7.el7_2
Fixes 2 records
Priority MEDIUM 45
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow r…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.10339 · Published 2015-11-13 · Partial fix CWE-120
Priority MEDIUM 41
Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of s…
CVSS 3.0HIGH 7.3· Network · No auth · No interaction · EPSS 0.06054 · Published 2016-01-21 · Partial fix CWE-119
