Описание
Security update for libpng12
The libpng12 package was updated to fix the following security issues:
- CVE-2015-8126: Fixed a buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions (bsc#954980).
- CVE-2015-7981: Fixed an out-of-bound read (bsc#952051).
Список пакетов
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
Ссылки
- Link for SUSE-SU-2015:2024-1
- E-Mail link for SUSE-SU-2015:2024-1
- SUSE Security Ratings
- SUSE Bug 952051
- SUSE Bug 954980
- SUSE CVE CVE-2015-7981 page
- SUSE CVE CVE-2015-8126 page
Описание
The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory information via crafted tIME chunk data in an image file, which triggers an out-of-bounds read.
Затронутые продукты
Ссылки
- CVE-2015-7981
- SUSE Bug 952051
- SUSE Bug 960402
- SUSE Bug 963937
Описание
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.
Затронутые продукты
Ссылки
- CVE-2015-8126
- SUSE Bug 954980
- SUSE Bug 958198
- SUSE Bug 960402
- SUSE Bug 962743
- SUSE Bug 963937
- SUSE Bug 969333