Medium ELSA-2015-2595 3 CVEs

Moderate: libpng12 security update (Oracle Linux 7)

Published Dec 9, 2015 · Updated Dec 9, 2015

Ecosystem: Oracle Linux

Summary

[1.2.50-7]
- Security fix for CVE-2015-7981 and CVE-2015-8126
- Resolves: #1283576

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 7	libpng12	0:1.2.50-7.el7_2
Oracle Linux · 7	libpng12-devel	0:1.2.50-7.el7_2

Vulnerabilities 3

Unscored —

CVE-2015-7981

The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.1…

libpng syslinux Ubuntu Azure Linux

Nov 24, 2015
Unscored —

CVE-2015-8126 EPSS 10%

Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2…

fltk libpng Ubuntu Azure Linux

Nov 13, 2015
Unscored —

CVE-2015-8472

Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x befor…

fltk libpng1.6 libpng Debian Ubuntu Azure Linux

Jan 21, 2016