AZL-44973 CVE-2017-12652 affecting package fltk for versions less than 1.3.8-1

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-44631 CVE-2016-9842 affecting package fltk for versions less than 1.3.8-1

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers...

AZL-44352 CVE-2016-9843 affecting package fltk for versions less than 1.3.8-1

The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation...

AZL-44316 CVE-2016-9841 affecting package fltk for versions less than 1.3.8-1

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...