Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:1530-1

Опубликовано: 07 июн. 2019
Источник: suse-cvrf

Описание

Security update for libpng16

This update for libpng16 fixes the following issues:

Security issues fixed:

  • CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when png_image_free() was called under png_safe_execute (bsc#1124211).
  • CVE-2018-13785: Fixed a wrong calculation of row_factor in the png_check_chunk_length function in pngrutil.c, which could haved triggered and integer overflow and result in an divide-by-zero while processing a crafted PNG file, leading to a denial of service (bsc#1100687)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
libpng16-16-1.6.34-lp151.3.3.1
libpng16-16-32bit-1.6.34-lp151.3.3.1
libpng16-compat-devel-1.6.34-lp151.3.3.1
libpng16-compat-devel-32bit-1.6.34-lp151.3.3.1
libpng16-devel-1.6.34-lp151.3.3.1
libpng16-devel-32bit-1.6.34-lp151.3.3.1
libpng16-tools-1.6.34-lp151.3.3.1
openSUSE Leap 15.1
libpng16-16-1.6.34-lp151.3.3.1
libpng16-16-32bit-1.6.34-lp151.3.3.1
libpng16-compat-devel-1.6.34-lp151.3.3.1
libpng16-compat-devel-32bit-1.6.34-lp151.3.3.1
libpng16-devel-1.6.34-lp151.3.3.1
libpng16-devel-32bit-1.6.34-lp151.3.3.1
libpng16-tools-1.6.34-lp151.3.3.1

Ссылки

Описание

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.

Затронутые продукты
openSUSE Leap 15.0:libpng16-16-1.6.34-lp151.3.3.1
openSUSE Leap 15.0:libpng16-16-32bit-1.6.34-lp151.3.3.1
openSUSE Leap 15.0:libpng16-compat-devel-1.6.34-lp151.3.3.1
openSUSE Leap 15.0:libpng16-compat-devel-32bit-1.6.34-lp151.3.3.1
Ссылки

Описание

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

Затронутые продукты
openSUSE Leap 15.0:libpng16-16-1.6.34-lp151.3.3.1
openSUSE Leap 15.0:libpng16-16-32bit-1.6.34-lp151.3.3.1
openSUSE Leap 15.0:libpng16-compat-devel-1.6.34-lp151.3.3.1
openSUSE Leap 15.0:libpng16-compat-devel-32bit-1.6.34-lp151.3.3.1
Ссылки
Уязвимость openSUSE-SU-2019:1530-1