Critical Photon OS Security Update - PHSA-2019-3.0-0014

Updates of 'openjdk8', 'openssh', 'mercurial', 'elasticsearch', 'sqlite', 'kibana', 'libpng' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-0014

Updates of 'kibana', 'sqlite', 'elasticsearch', 'openssh', 'openjdk8', 'mercurial', 'libpng' packages of Photon OS have been released...

Fedora Update for libpng FEDORA-2019-335c3ad86a

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security Bulletin: IBM Security Guardium is affected by a Java vulnerability

Summary IBM Security Guardium has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-13785 DESCRIPTION: libpng is vulnerable to a denial of service, caused by a wrong calculation of rowfactor in the pngcheckchunklength function in pngrutil.c. By persuading a victim to op...

Ubuntu 18.04 LTS : libpng vulnerability (USN-3962-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3962-1 advisory. It was discovered that libpng incorrectly handled certain memory operations. If a user or automated system were tricked into opening a specially crafted PNG file,...

USN-3962-1: libpng vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that libpng incorrectly handled certain memory operations. If a user or automated system were tricked into opening a specially crafted PNG file, a remote attacker could use this issue to...

EulerOS 2.0 SP3 : libpng (EulerOS-SA-2019-1307)

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The pngsettext2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allow...

USN-3962-1 libpng1.6 vulnerability

It was discovered that libpng incorrectly handled certain memory operations. If a user or automated system were tricked into opening a specially crafted PNG file, a remote attacker could use this issue to cause libpng to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-3962-1: libpng vulnerability

It was discovered that libpng incorrectly handled certain memory operations. If a user or automated system were tricked into opening a specially crafted PNG file, a remote attacker could use this issue to cause libpng to crash, resulting in a denial of service, or possibly execute arbitrary code...

Denial Of Service (DoS)

libpng is vulnerable to denial of service. Invoking pngimagefree under pngsafeexecute results in a use-after-free bug that causes the application to crash or allow arbitrary code execution...

[ASA-201904-10] libpng: denial of service

Arch Linux Security Advisory ASA-201904-10 ========================================== Severity: Low Date : 2019-04-24 CVE-ID : CVE-2019-7317 Package : libpng Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-868 Summary ======= The package libpng before version 1.6.37...

libpng buffer overflow vulnerability (CNVD-2019-13088)

libpng is a PNG reference library that can create, read and write PNG graphics files. A buffer overflow vulnerability exists in the 'contrib/pngminus/pnm2png.c:gettoken' function in libpng, which originates when a networked system or product performs an operation in memory without properly...

Slackware 14.2 / current : libpng (SSA:2019-107-01)

New libpng packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-107-01. The text itself is copyright C Slackware Linux, Inc...

[slackware-security] libpng

New libpng packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libpng-1.6.37-i586-1slack14.2.txz: Upgraded. This update fixes security issues: Fixed a use-after-free vulnerability CVE-2019-7317 in...

Security Bulletin: Multiple vulnerabilities in the IBM SDK, Java Technology Edition affect IBM Performance Management products

Summary Multiple vulnerabilities in the Oracle Java SE and the Java SE Embedded impact the IBM SDK, Java Technology Edition. Vulnerability Details CVEID: CVE-2018-3139 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded Networking component could...

MGASA-2019-0126 Updated libpng packages fix security vulnerability

pngimagefree in png.c in libpng 1.6.0 up to 1.6.36 had a use-after-free because pngimagefreefunction is called under pngsafeexecute CVE-2019-7317...

Updated libpng packages fix security vulnerability

pngimagefree in png.c in libpng 1.6.0 up to 1.6.36 had a use-after-free because pngimagefreefunction is called under pngsafeexecute CVE-2019-7317...

EulerOS 2.0 SP2 : libpng (EulerOS-SA-2019-1117)

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The pngsettext2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allow...

[SECURITY] Fedora 29 Update: libpng-1.6.34-7.fc29

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng...

Fedora 29 : 2:libpng (2019-335c3ad86a)

Fix for CVE-2019-7317 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...