ALAS2-2020-1528 — Low: libpng security update (Amazon Linux 2)

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-12652: libpng before 1.6.32 does not properly check the length of chunks against the user limit. 1733956: CVE-2017-12652 libpng: does not check length of chunks against user limit

Fixed packages 4

Release	Package	Fixed in
Amazon Linux · 2	libpng	2:1.5.13-8.amzn2
Amazon Linux · 2	libpng-debuginfo	2:1.5.13-8.amzn2
Amazon Linux · 2	libpng-devel	2:1.5.13-8.amzn2
Amazon Linux · 2	libpng-static	2:1.5.13-8.amzn2

Vulnerabilities 1

Critical 9.8

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

openjpeg2 fltk libpng1.6 libpng1.6 Debian Ubuntu Azure Linux

Jul 10, 2019

References

web
https://alas.aws.amazon.com/cve/html/CVE-2017-12652.html