Red Hat Security Advisory

RHSA-2020:3901

libpng security update

Released 2020-09-29 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) libpng-2:1.5.13-8.el7
Red Hat Enterprise Linux Client Optional (v. 7) libpng-devel-2:1.5.13-8.el7, libpng-static-2:1.5.13-8.el7
Red Hat Enterprise Linux ComputeNode (v. 7) libpng-2:1.5.13-8.el7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) libpng-devel-2:1.5.13-8.el7, libpng-static-2:1.5.13-8.el7
Red Hat Enterprise Linux Server (v. 7) libpng-2:1.5.13-8.el7, libpng-2:1.5.13-8.el7.ppc, libpng-devel-2:1.5.13-8.el7 +1
Red Hat Enterprise Linux Server Optional (v. 7) libpng-static-2:1.5.13-8.el7, libpng-static-2:1.5.13-8.el7.ppc
Red Hat Enterprise Linux Workstation (v. 7) libpng-2:1.5.13-8.el7, libpng-devel-2:1.5.13-8.el7
Red Hat Enterprise Linux Workstation Optional (v. 7) libpng-static-2:1.5.13-8.el7

TI-2017-09377 CVE-2017-12652 · GHSA-94xg-qm4r-9r7c

MEDIUM 56

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04113 Published 2019-07-10 Partial fix CWE-20