Read the docs
TI-2015-06985 Aliases CVE-2015-8472GHSA-h5hh-r95x-mmfq

Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x…

Priority MEDIUM 41CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Partial Red Hat: 39 fixed, 1 without a fix

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat.

Summary

Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8126.

Why it matters now

EPSS 0.06054 93rd percentileScored 2026-11-07
Fix Partial Red Hat: 11 advisoriesRed Hat: 39 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 114

CPEVersionsRoleVendor
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*up to 10.11.3VulnerableApple
cpe:2.3:a:libpng:libpng:1.0.64:*:*:*:*:*:*:*1.0.64Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:*1.2.0Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:*1.2.1Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:*1.2.2Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:*1.2.3Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.4:*:*:*:*:*:*:*1.2.4Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.10:*:*:*:*:*:*:*1.2.10Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.11:*:*:*:*:*:*:*1.2.11Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.12:*:*:*:*:*:*:*1.2.12Vulnerablepnggroup
  • cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* Versions up to 10.11.3 Vulnerable ·Apple
  • cpe:2.3:a:libpng:libpng:1.0.64:*:*:*:*:*:*:* Versions 1.0.64 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.10:*:*:*:*:*:*:* Versions 1.2.10 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.11:*:*:*:*:*:*:* Versions 1.2.11 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.12:*:*:*:*:*:*:* Versions 1.2.12 Vulnerable ·pnggroup
Show 104 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:libpng:libpng:1.2.13:*:*:*:*:*:*:*1.2.13Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.14:*:*:*:*:*:*:*1.2.14Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.15:*:*:*:*:*:*:*1.2.15Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.16:*:*:*:*:*:*:*1.2.16Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.17:*:*:*:*:*:*:*1.2.17Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.18:*:*:*:*:*:*:*1.2.18Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.19:*:*:*:*:*:*:*1.2.19Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.20:*:*:*:*:*:*:*1.2.20Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.21:*:*:*:*:*:*:*1.2.21Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.22:*:*:*:*:*:*:*1.2.22Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.23:*:*:*:*:*:*:*1.2.23Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.24:*:*:*:*:*:*:*1.2.24Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.25:*:*:*:*:*:*:*1.2.25Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.26:*:*:*:*:*:*:*1.2.26Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.27:*:*:*:*:*:*:*1.2.27Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.28:*:*:*:*:*:*:*1.2.28Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.29:*:*:*:*:*:*:*1.2.29Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.30:*:*:*:*:*:*:*1.2.30Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.31:*:*:*:*:*:*:*1.2.31Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.32:*:*:*:*:*:*:*1.2.32Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.33:*:*:*:*:*:*:*1.2.33Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.34:*:*:*:*:*:*:*1.2.34Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.35:*:*:*:*:*:*:*1.2.35Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.36:*:*:*:*:*:*:*1.2.36Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.37:*:*:*:*:*:*:*1.2.37Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.38:*:*:*:*:*:*:*1.2.38Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.39:*:*:*:*:*:*:*1.2.39Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.40:*:*:*:*:*:*:*1.2.40Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.41:*:*:*:*:*:*:*1.2.41Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.42:*:*:*:*:*:*:*1.2.42Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.43:*:*:*:*:*:*:*1.2.43Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.44:*:*:*:*:*:*:*1.2.44Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.45:*:*:*:*:*:*:*1.2.45Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.46:*:*:*:*:*:*:*1.2.46Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.47:*:*:*:*:*:*:*1.2.47Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.48:*:*:*:*:*:*:*1.2.48Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.49:*:*:*:*:*:*:*1.2.49Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.50:*:*:*:*:*:*:*1.2.50Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.51:*:*:*:*:*:*:*1.2.51Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.52:*:*:*:*:*:*:*1.2.52Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.53:*:*:*:*:*:*:*1.2.53Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.2.54:*:*:*:*:*:*:*1.2.54Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.0:*:*:*:*:*:*:*1.4.0Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.1:*:*:*:*:*:*:*1.4.1Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.2:*:*:*:*:*:*:*1.4.2Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.3:*:*:*:*:*:*:*1.4.3Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.4:*:*:*:*:*:*:*1.4.4Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.5:*:*:*:*:*:*:*1.4.5Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.6:*:*:*:*:*:*:*1.4.6Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.7:*:*:*:*:*:*:*1.4.7Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.8:*:*:*:*:*:*:*1.4.8Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.9:*:*:*:*:*:*:*1.4.9Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.10:*:*:*:*:*:*:*1.4.10Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.11:*:*:*:*:*:*:*1.4.11Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.12:*:*:*:*:*:*:*1.4.12Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.13:*:*:*:*:*:*:*1.4.13Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.14:*:*:*:*:*:*:*1.4.14Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.15:*:*:*:*:*:*:*1.4.15Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.16:*:*:*:*:*:*:*1.4.16Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.4.17:*:*:*:*:*:*:*1.4.17Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.1:*:*:*:*:*:*:*1.5.1Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.2:*:*:*:*:*:*:*1.5.2Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.3:*:*:*:*:*:*:*1.5.3Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.4:*:*:*:*:*:*:*1.5.4Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.5:*:*:*:*:*:*:*1.5.5Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.6:*:*:*:*:*:*:*1.5.6Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.7:*:*:*:*:*:*:*1.5.7Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.8:*:*:*:*:*:*:*1.5.8Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.9:*:*:*:*:*:*:*1.5.9Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.10:*:*:*:*:*:*:*1.5.10Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.11:*:*:*:*:*:*:*1.5.11Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.12:*:*:*:*:*:*:*1.5.12Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.13:*:*:*:*:*:*:*1.5.13Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.14:*:*:*:*:*:*:*1.5.14Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.15:*:*:*:*:*:*:*1.5.15Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.16:*:*:*:*:*:*:*1.5.16Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.17:*:*:*:*:*:*:*1.5.17Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.18:*:*:*:*:*:*:*1.5.18Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.19:*:*:*:*:*:*:*1.5.19Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.20:*:*:*:*:*:*:*1.5.20Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.21:*:*:*:*:*:*:*1.5.21Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.22:*:*:*:*:*:*:*1.5.22Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.23:*:*:*:*:*:*:*1.5.23Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.5.24:*:*:*:*:*:*:*1.5.24Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.0:*:*:*:*:*:*:*1.6.0Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.1:*:*:*:*:*:*:*1.6.1Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.2:*:*:*:*:*:*:*1.6.2Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.3:*:*:*:*:*:*:*1.6.3Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.4:*:*:*:*:*:*:*1.6.4Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.5:*:*:*:*:*:*:*1.6.5Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.6:*:*:*:*:*:*:*1.6.6Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.7:*:*:*:*:*:*:*1.6.7Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.8:*:*:*:*:*:*:*1.6.8Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.9:*:*:*:*:*:*:*1.6.9Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.10:*:*:*:*:*:*:*1.6.10Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.11:*:*:*:*:*:*:*1.6.11Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.12:*:*:*:*:*:*:*1.6.12Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.13:*:*:*:*:*:*:*1.6.13Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.14:*:*:*:*:*:*:*1.6.14Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.15:*:*:*:*:*:*:*1.6.15Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.16:*:*:*:*:*:*:*1.6.16Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.17:*:*:*:*:*:*:*1.6.17Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.18:*:*:*:*:*:*:*1.6.18Vulnerablepnggroup
cpe:2.3:a:libpng:libpng:1.6.19:*:*:*:*:*:*:*1.6.19Vulnerablepnggroup
  • cpe:2.3:a:libpng:libpng:1.2.13:*:*:*:*:*:*:* Versions 1.2.13 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.14:*:*:*:*:*:*:* Versions 1.2.14 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.15:*:*:*:*:*:*:* Versions 1.2.15 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.16:*:*:*:*:*:*:* Versions 1.2.16 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.17:*:*:*:*:*:*:* Versions 1.2.17 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.18:*:*:*:*:*:*:* Versions 1.2.18 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.19:*:*:*:*:*:*:* Versions 1.2.19 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.20:*:*:*:*:*:*:* Versions 1.2.20 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.21:*:*:*:*:*:*:* Versions 1.2.21 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.22:*:*:*:*:*:*:* Versions 1.2.22 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.23:*:*:*:*:*:*:* Versions 1.2.23 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.24:*:*:*:*:*:*:* Versions 1.2.24 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.25:*:*:*:*:*:*:* Versions 1.2.25 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.26:*:*:*:*:*:*:* Versions 1.2.26 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.27:*:*:*:*:*:*:* Versions 1.2.27 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.28:*:*:*:*:*:*:* Versions 1.2.28 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.29:*:*:*:*:*:*:* Versions 1.2.29 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.30:*:*:*:*:*:*:* Versions 1.2.30 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.31:*:*:*:*:*:*:* Versions 1.2.31 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.32:*:*:*:*:*:*:* Versions 1.2.32 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.33:*:*:*:*:*:*:* Versions 1.2.33 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.34:*:*:*:*:*:*:* Versions 1.2.34 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.35:*:*:*:*:*:*:* Versions 1.2.35 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.36:*:*:*:*:*:*:* Versions 1.2.36 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.37:*:*:*:*:*:*:* Versions 1.2.37 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.38:*:*:*:*:*:*:* Versions 1.2.38 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.39:*:*:*:*:*:*:* Versions 1.2.39 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.40:*:*:*:*:*:*:* Versions 1.2.40 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.41:*:*:*:*:*:*:* Versions 1.2.41 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.42:*:*:*:*:*:*:* Versions 1.2.42 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.43:*:*:*:*:*:*:* Versions 1.2.43 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.44:*:*:*:*:*:*:* Versions 1.2.44 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.45:*:*:*:*:*:*:* Versions 1.2.45 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.46:*:*:*:*:*:*:* Versions 1.2.46 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.47:*:*:*:*:*:*:* Versions 1.2.47 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.48:*:*:*:*:*:*:* Versions 1.2.48 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.49:*:*:*:*:*:*:* Versions 1.2.49 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.50:*:*:*:*:*:*:* Versions 1.2.50 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.51:*:*:*:*:*:*:* Versions 1.2.51 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.52:*:*:*:*:*:*:* Versions 1.2.52 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.53:*:*:*:*:*:*:* Versions 1.2.53 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.2.54:*:*:*:*:*:*:* Versions 1.2.54 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.4:*:*:*:*:*:*:* Versions 1.4.4 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.6:*:*:*:*:*:*:* Versions 1.4.6 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.7:*:*:*:*:*:*:* Versions 1.4.7 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.8:*:*:*:*:*:*:* Versions 1.4.8 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.9:*:*:*:*:*:*:* Versions 1.4.9 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.10:*:*:*:*:*:*:* Versions 1.4.10 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.11:*:*:*:*:*:*:* Versions 1.4.11 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.12:*:*:*:*:*:*:* Versions 1.4.12 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.13:*:*:*:*:*:*:* Versions 1.4.13 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.14:*:*:*:*:*:*:* Versions 1.4.14 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.15:*:*:*:*:*:*:* Versions 1.4.15 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.16:*:*:*:*:*:*:* Versions 1.4.16 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.4.17:*:*:*:*:*:*:* Versions 1.4.17 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.2:*:*:*:*:*:*:* Versions 1.5.2 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.3:*:*:*:*:*:*:* Versions 1.5.3 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.4:*:*:*:*:*:*:* Versions 1.5.4 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.5:*:*:*:*:*:*:* Versions 1.5.5 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.6:*:*:*:*:*:*:* Versions 1.5.6 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.7:*:*:*:*:*:*:* Versions 1.5.7 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.8:*:*:*:*:*:*:* Versions 1.5.8 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.9:*:*:*:*:*:*:* Versions 1.5.9 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.10:*:*:*:*:*:*:* Versions 1.5.10 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.11:*:*:*:*:*:*:* Versions 1.5.11 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.12:*:*:*:*:*:*:* Versions 1.5.12 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.13:*:*:*:*:*:*:* Versions 1.5.13 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.14:*:*:*:*:*:*:* Versions 1.5.14 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.15:*:*:*:*:*:*:* Versions 1.5.15 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.16:*:*:*:*:*:*:* Versions 1.5.16 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.17:*:*:*:*:*:*:* Versions 1.5.17 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.18:*:*:*:*:*:*:* Versions 1.5.18 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.19:*:*:*:*:*:*:* Versions 1.5.19 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.20:*:*:*:*:*:*:* Versions 1.5.20 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.21:*:*:*:*:*:*:* Versions 1.5.21 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.22:*:*:*:*:*:*:* Versions 1.5.22 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.23:*:*:*:*:*:*:* Versions 1.5.23 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.5.24:*:*:*:*:*:*:* Versions 1.5.24 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.2:*:*:*:*:*:*:* Versions 1.6.2 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.3:*:*:*:*:*:*:* Versions 1.6.3 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.4:*:*:*:*:*:*:* Versions 1.6.4 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.5:*:*:*:*:*:*:* Versions 1.6.5 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.6:*:*:*:*:*:*:* Versions 1.6.6 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.7:*:*:*:*:*:*:* Versions 1.6.7 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.8:*:*:*:*:*:*:* Versions 1.6.8 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.9:*:*:*:*:*:*:* Versions 1.6.9 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.10:*:*:*:*:*:*:* Versions 1.6.10 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.11:*:*:*:*:*:*:* Versions 1.6.11 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.12:*:*:*:*:*:*:* Versions 1.6.12 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.13:*:*:*:*:*:*:* Versions 1.6.13 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.14:*:*:*:*:*:*:* Versions 1.6.14 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.15:*:*:*:*:*:*:* Versions 1.6.15 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.16:*:*:*:*:*:*:* Versions 1.6.16 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.17:*:*:*:*:*:*:* Versions 1.6.17 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.18:*:*:*:*:*:*:* Versions 1.6.18 Vulnerable ·pnggroup
  • cpe:2.3:a:libpng:libpng:1.6.19:*:*:*:*:*:*:* Versions 1.6.19 Vulnerable ·pnggroup

Remediation

Red Hat 11 advisories

  • RHSA-2016:1430 Released 2016-07-18 · Red Hat rating Moderate
    java-1.7.0-ibm and java-1.7.1-ibm security update
    • Red Hat Satellite 5.6 (RHEL v.5) java-1.7.0-ibm-1:1.7.0.9.40-1jpp.1.el5, java-1.7.0-ibm-devel-1:1.7.0.9.40-1jpp.1.el5, spacewalk-java-2.0.2-109.el5sat +5
    • Red Hat Satellite 5.6 (RHEL v.6) java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.40-1jpp.1.el6_7, spacewalk-java-2.0.2-109.el6sat +5
    • Red Hat Satellite 5.7 (RHEL v.6) java-1.7.1-ibm-1:1.7.1.3.40-1jpp.1.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.40-1jpp.1.el6_7, spacewalk-java-2.3.8-146.el6sat +5
  • RHSA-2016:0099 Released 2016-02-02 · Red Hat rating Critical
    java-1.7.1-ibm security update
    • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.3.30-1jpp.1.el7 +3
    • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.3.30-1jpp.1.el7 +1
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.30-1jpp.2.el6_7 +3
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.30-1jpp.2.el6_7 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.30-1jpp.2.el6_7 +3
    • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7, java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7.ppc, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.1.el7 +6
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.2.el6_7, java-1.7.1-ibm-devel-1:1.7.1.3.30-1jpp.2.el6_7 +3
    • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.7.1-ibm-1:1.7.1.3.30-1jpp.1.el7, java-1.7.1-ibm-demo-1:1.7.1.3.30-1jpp.1.el7, java-1.7.1-ibm-devel-1:1.7.1.3.30-1jpp.1.el7 +3
  • RHSA-2016:0098 Released 2016-02-02 · Red Hat rating Critical
    java-1.8.0-ibm security update
    • Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.2.10-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.2.10-1jpp.1.el7 +3
    • Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.2.10-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.2.10-1jpp.1.el7 +1
    • Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7, java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7.ppc, java-1.8.0-ibm-demo-1:1.8.0.2.10-1jpp.1.el7 +5
    • Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.2.10-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.2.10-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.2.10-1jpp.1.el7 +3
Show 8 more Red Hat advisories
  • RHSA-2016:0100 Released 2016-02-02 · Red Hat rating Critical
    java-1.7.0-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5, java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5.i386, java-1.7.0-ibm-demo-1:1.7.0.9.30-1jpp.1.el5 +9
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5, java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5.i386, java-1.7.0-ibm-1:1.7.0.9.30-1jpp.1.el5.ppc +15
  • RHSA-2016:0101 Released 2016-02-02 · Red Hat rating Critical
    java-1.6.0-ibm security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el5.i386, java-1.6.0-ibm-accessibility-1:1.6.0.16.20-1jpp.1.el5 +13
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-demo-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-devel-1:1.6.0.16.20-1jpp.1.el6_7 +4
    • Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-demo-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-devel-1:1.6.0.16.20-1jpp.1.el6_7 +2
    • Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el5.i386, java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el5.ppc +21
    • Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-demo-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-devel-1:1.6.0.16.20-1jpp.1.el6_7 +4
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-demo-1:1.6.0.16.20-1jpp.1.el6_7, java-1.6.0-ibm-devel-1:1.6.0.16.20-1jpp.1.el6_7 +4
  • RHSA-2016:0055 Released 2016-01-21 · Red Hat rating Critical
    java-1.8.0-oracle security update
    • Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7, java-1.8.0-oracle-devel-1:1.8.0.71-1jpp.1.el7, java-1.8.0-oracle-javafx-1:1.8.0.71-1jpp.1.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7, java-1.8.0-oracle-devel-1:1.8.0.71-1jpp.1.el7, java-1.8.0-oracle-javafx-1:1.8.0.71-1jpp.1.el7 +1
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7, java-1.8.0-oracle-devel-1:1.8.0.71-1jpp.1.el6_7, java-1.8.0-oracle-javafx-1:1.8.0.71-1jpp.1.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7, java-1.8.0-oracle-devel-1:1.8.0.71-1jpp.1.el6_7, java-1.8.0-oracle-javafx-1:1.8.0.71-1jpp.1.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7, java-1.8.0-oracle-devel-1:1.8.0.71-1jpp.1.el7, java-1.8.0-oracle-javafx-1:1.8.0.71-1jpp.1.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7, java-1.8.0-oracle-devel-1:1.8.0.71-1jpp.1.el6_7, java-1.8.0-oracle-javafx-1:1.8.0.71-1jpp.1.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el6_7, java-1.8.0-oracle-devel-1:1.8.0.71-1jpp.1.el6_7, java-1.8.0-oracle-javafx-1:1.8.0.71-1jpp.1.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-oracle-1:1.8.0.71-1jpp.1.el7, java-1.8.0-oracle-devel-1:1.8.0.71-1jpp.1.el7, java-1.8.0-oracle-javafx-1:1.8.0.71-1jpp.1.el7 +3
  • RHSA-2016:0056 Released 2016-01-21 · Red Hat rating Critical
    java-1.7.0-oracle security update
    • Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7, java-1.7.0-oracle-devel-1:1.7.0.95-1jpp.2.el7, java-1.7.0-oracle-javafx-1:1.7.0.95-1jpp.2.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Client 5 java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11, java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11.i586, java-1.7.0-oracle-devel-1:1.7.0.95-1jpp.1.el5_11 +9
    • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7, java-1.7.0-oracle-devel-1:1.7.0.95-1jpp.2.el7, java-1.7.0-oracle-javafx-1:1.7.0.95-1jpp.2.el7 +1
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7, java-1.7.0-oracle-devel-1:1.7.0.95-1jpp.1.el6_7, java-1.7.0-oracle-javafx-1:1.7.0.95-1jpp.1.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7, java-1.7.0-oracle-devel-1:1.7.0.95-1jpp.1.el6_7, java-1.7.0-oracle-javafx-1:1.7.0.95-1jpp.1.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7, java-1.7.0-oracle-devel-1:1.7.0.95-1jpp.2.el7, java-1.7.0-oracle-javafx-1:1.7.0.95-1jpp.2.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Server 5 java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11, java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el5_11.i586, java-1.7.0-oracle-devel-1:1.7.0.95-1jpp.1.el5_11 +9
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7, java-1.7.0-oracle-devel-1:1.7.0.95-1jpp.1.el6_7, java-1.7.0-oracle-javafx-1:1.7.0.95-1jpp.1.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation java-1.7.0-oracle-1:1.7.0.95-1jpp.1.el6_7, java-1.7.0-oracle-devel-1:1.7.0.95-1jpp.1.el6_7, java-1.7.0-oracle-javafx-1:1.7.0.95-1jpp.1.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.7.0-oracle-1:1.7.0.95-1jpp.2.el7, java-1.7.0-oracle-devel-1:1.7.0.95-1jpp.2.el7, java-1.7.0-oracle-javafx-1:1.7.0.95-1jpp.2.el7 +3
  • RHSA-2016:0057 Released 2016-01-21 · Red Hat rating Important
    java-1.6.0-sun security update
    • Oracle Java for Red Hat Enterprise Linux Client (v. 7) java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.1.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Client 5 java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11, java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11.i586, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.3.el5_11 +9
    • Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7) java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.1.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.3.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.3.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Server (v. 7) java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.1.el7 +3
    • Oracle Java for Red Hat Enterprise Linux Server 5 java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11, java-1.6.0-sun-1:1.6.0.111-1jpp.3.el5_11.i586, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.3.el5_11 +9
    • Oracle Java for Red Hat Enterprise Linux Server 6 java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.3.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation java-1.6.0-sun-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.3.el6_7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.3.el6_7 +3
    • Oracle Java for Red Hat Enterprise Linux Workstation (v. 7) java-1.6.0-sun-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-demo-1:1.6.0.111-1jpp.1.el7, java-1.6.0-sun-devel-1:1.6.0.111-1jpp.1.el7 +3
  • RHSA-2015:2595 Released 2015-12-09 · Red Hat rating Moderate
    libpng12 security update
    • Red Hat Enterprise Linux Client (v. 7) libpng12-1.2.50-7.el7_2
    • Red Hat Enterprise Linux Client Optional (v. 7) libpng12-devel-1.2.50-7.el7_2
    • Red Hat Enterprise Linux ComputeNode (v. 7) libpng12-1.2.50-7.el7_2
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) libpng12-devel-1.2.50-7.el7_2
    • Red Hat Enterprise Linux Server (v. 7) libpng12-1.2.50-7.el7_2, libpng12-1.2.50-7.el7_2.ppc
    • Red Hat Enterprise Linux Server Optional (v. 7) libpng12-devel-1.2.50-7.el7_2, libpng12-devel-1.2.50-7.el7_2.ppc
    • Red Hat Enterprise Linux Workstation (v. 7) libpng12-1.2.50-7.el7_2
    • Red Hat Enterprise Linux Workstation Optional (v. 7) libpng12-devel-1.2.50-7.el7_2
  • RHSA-2015:2596 Released 2015-12-09 · Red Hat rating Moderate
    libpng security update
    • Red Hat Enterprise Linux Client (v. 7) libpng-2:1.5.13-7.el7_2
    • Red Hat Enterprise Linux Client Optional (v. 7) libpng-devel-2:1.5.13-7.el7_2, libpng-static-2:1.5.13-7.el7_2
    • Red Hat Enterprise Linux ComputeNode (v. 7) libpng-2:1.5.13-7.el7_2
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) libpng-devel-2:1.5.13-7.el7_2, libpng-static-2:1.5.13-7.el7_2
    • Red Hat Enterprise Linux Server (v. 7) libpng-2:1.5.13-7.el7_2, libpng-2:1.5.13-7.el7_2.ppc, libpng-devel-2:1.5.13-7.el7_2 +1
    • Red Hat Enterprise Linux Server Optional (v. 7) libpng-static-2:1.5.13-7.el7_2, libpng-static-2:1.5.13-7.el7_2.ppc
    • Red Hat Enterprise Linux Workstation (v. 7) libpng-2:1.5.13-7.el7_2, libpng-devel-2:1.5.13-7.el7_2
    • Red Hat Enterprise Linux Workstation Optional (v. 7) libpng-static-2:1.5.13-7.el7_2
  • RHSA-2015:2594 Released 2015-12-09 · Red Hat rating Moderate
    libpng security update
    • Red Hat Enterprise Linux Desktop (v. 6) libpng-2:1.2.49-2.el6_7
    • Red Hat Enterprise Linux Desktop Optional (v. 6) libpng-devel-2:1.2.49-2.el6_7, libpng-static-2:1.2.49-2.el6_7
    • Red Hat Enterprise Linux HPC Node (v. 6) libpng-2:1.2.49-2.el6_7
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) libpng-devel-2:1.2.49-2.el6_7, libpng-static-2:1.2.49-2.el6_7
    • Red Hat Enterprise Linux Server (v. 6) libpng-2:1.2.49-2.el6_7, libpng-2:1.2.49-2.el6_7.ppc, libpng-devel-2:1.2.49-2.el6_7 +1
    • Red Hat Enterprise Linux Server Optional (v. 6) libpng-static-2:1.2.49-2.el6_7
    • Red Hat Enterprise Linux Workstation (v. 6) libpng-2:1.2.49-2.el6_7, libpng-devel-2:1.2.49-2.el6_7
    • Red Hat Enterprise Linux Workstation Optional (v. 6) libpng-static-2:1.2.49-2.el6_7

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Oracle Java for Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2016:0055, RHSA-2016:0056, RHSA-2016:0057
Oracle Java for Red Hat Enterprise Linux Client 5Fixed RHSA-2016:0056, RHSA-2016:0057
Oracle Java for Red Hat Enterprise Linux Compute Node (v. 7)Fixed RHSA-2016:0055, RHSA-2016:0056, RHSA-2016:0057
Oracle Java for Red Hat Enterprise Linux Desktop 6Fixed RHSA-2016:0055, RHSA-2016:0056, RHSA-2016:0057
Oracle Java for Red Hat Enterprise Linux HPC Node 6Fixed RHSA-2016:0055, RHSA-2016:0056, RHSA-2016:0057
Oracle Java for Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2016:0055, RHSA-2016:0056, RHSA-2016:0057
Oracle Java for Red Hat Enterprise Linux Server 5Fixed RHSA-2016:0056, RHSA-2016:0057
Oracle Java for Red Hat Enterprise Linux Server 6Fixed RHSA-2016:0055, RHSA-2016:0056, RHSA-2016:0057
Oracle Java for Red Hat Enterprise Linux WorkstationFixed RHSA-2016:0055, RHSA-2016:0056, RHSA-2016:0057
Oracle Java for Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2016:0055, RHSA-2016:0056, RHSA-2016:0057
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2015:2595, RHSA-2015:2596
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2015:2595, RHSA-2015:2596
Red Hat Enterprise Linux Client Supplementary (v. 7)Fixed RHSA-2016:0098, RHSA-2016:0099
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2015:2595, RHSA-2015:2596
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2015:2595, RHSA-2015:2596
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7)Fixed RHSA-2016:0098, RHSA-2016:0099
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2015:2594
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2015:2594
Red Hat Enterprise Linux Desktop Supplementary (v. 5)Fixed RHSA-2016:0100, RHSA-2016:0101
Red Hat Enterprise Linux Desktop Supplementary (v. 6)Fixed RHSA-2016:0099, RHSA-2016:0101
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2015:2594
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2015:2594
Red Hat Enterprise Linux HPC Node Supplementary (v. 6)Fixed RHSA-2016:0099, RHSA-2016:0101
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2015:2594
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2015:2595, RHSA-2015:2596
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2015:2594
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2015:2595, RHSA-2015:2596
Red Hat Enterprise Linux Server Supplementary (v. 5)Fixed RHSA-2016:0100, RHSA-2016:0101
Red Hat Enterprise Linux Server Supplementary (v. 6)Fixed RHSA-2016:0099, RHSA-2016:0101
Red Hat Enterprise Linux Server Supplementary (v. 7)Fixed RHSA-2016:0098, RHSA-2016:0099
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2015:2594
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2015:2595, RHSA-2015:2596
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2015:2594
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2015:2595, RHSA-2015:2596
Red Hat Enterprise Linux Workstation Supplementary (v. 6)Fixed RHSA-2016:0099, RHSA-2016:0101
Red Hat Enterprise Linux Workstation Supplementary (v. 7)Fixed RHSA-2016:0098, RHSA-2016:0099
Red Hat Satellite 5.6 (RHEL v.5)Fixed RHSA-2016:1430
Red Hat Satellite 5.6 (RHEL v.6)Fixed RHSA-2016:1430
Red Hat Satellite 5.7 (RHEL v.6)Fixed RHSA-2016:1430

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-8472
  2. 2026-10-03 Alias added: GHSA-h5hh-r95x-mmfq

References

Advisory 22

Other 8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences