Описание
Security update for pngcheck
This update for pngcheck fixes the following issues:
- CVE-2020-27818: Fixed a global buffer overflow in check_chunk_name function via crafted pngfile (boo#1179528).
Список пакетов
openSUSE Leap 15.2
pngcheck-2.3.0-lp152.4.3.1
Ссылки
- E-Mail link for openSUSE-SU-2020:2177-1
- SUSE Security Ratings
- SUSE Bug 1179528
- SUSE CVE CVE-2020-27818 page
Описание
A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could cause a temporary denial of service, posing a low risk to application availability.
Затронутые продукты
openSUSE Leap 15.2:pngcheck-2.3.0-lp152.4.3.1
Ссылки
- CVE-2020-27818
- SUSE Bug 1179528