Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:3060-1

Опубликовано: 25 нояб. 2019
Источник: suse-cvrf

Описание

Security update for libpng16

This update for libpng16 fixes the following issues:

Security issues fixed:

  • CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when png_image_free() was called under png_safe_execute (bsc#1124211).
  • CVE-2017-12652: Fixed an Input Validation Error related to the length of chunks (bsc#1141493).

Список пакетов

SUSE Linux Enterprise Desktop 12 SP4
libpng16-1.6.8-15.5.2
libpng16-16-1.6.8-15.5.2
libpng16-16-32bit-1.6.8-15.5.2
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libpng16-1.6.8-15.5.2
libpng16-16-1.6.8-15.5.2
libpng16-16-32bit-1.6.8-15.5.2
SUSE Linux Enterprise Software Development Kit 12 SP4
libpng16-1.6.8-15.5.2
libpng16-compat-devel-1.6.8-15.5.2
libpng16-devel-1.6.8-15.5.2
SUSE Linux Enterprise Software Development Kit 12 SP5
libpng16-1.6.8-15.5.2
libpng16-compat-devel-1.6.8-15.5.2
libpng16-devel-1.6.8-15.5.2
SUSE Linux Enterprise Server 12 SP4
libpng16-1.6.8-15.5.2
libpng16-16-1.6.8-15.5.2
libpng16-16-32bit-1.6.8-15.5.2
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libpng16-1.6.8-15.5.2
libpng16-16-1.6.8-15.5.2
libpng16-16-32bit-1.6.8-15.5.2
SUSE Linux Enterprise Server 12 SP5
libpng16-1.6.8-15.5.2
libpng16-16-1.6.8-15.5.2
libpng16-16-32bit-1.6.8-15.5.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libpng16-1.6.8-15.5.2
libpng16-16-1.6.8-15.5.2
libpng16-16-32bit-1.6.8-15.5.2

Ссылки

Описание

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP4:libpng16-1.6.8-15.5.2
SUSE Linux Enterprise Desktop 12 SP4:libpng16-16-1.6.8-15.5.2
SUSE Linux Enterprise Desktop 12 SP4:libpng16-16-32bit-1.6.8-15.5.2
SUSE Linux Enterprise Server 12 SP4:libpng16-1.6.8-15.5.2
Ссылки

Описание

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP4:libpng16-1.6.8-15.5.2
SUSE Linux Enterprise Desktop 12 SP4:libpng16-16-1.6.8-15.5.2
SUSE Linux Enterprise Desktop 12 SP4:libpng16-16-32bit-1.6.8-15.5.2
SUSE Linux Enterprise Server 12 SP4:libpng16-1.6.8-15.5.2
Ссылки
Уязвимость SUSE-SU-2019:3060-1