Medium ELSA-2015-2596 2 CVEs

Moderate: libpng security update (Oracle Linux 7)

Published Dec 9, 2015 · Updated Dec 9, 2015

Ecosystem: Oracle Linux

Summary

[2:1.5.13-7]
- Security fix for CVE-2015-8126
- Changing png_ptr to info_ptf based on upstream
- Related: #1283576

[2:1.5.13-6]
- Security fix for CVE-2015-8126
- Resolves: #1283576

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	libpng	2:1.5.13-7.el7_2
Oracle Linux · 7	libpng-devel	2:1.5.13-7.el7_2
Oracle Linux · 7	libpng-static	2:1.5.13-7.el7_2

Vulnerabilities 2

Unscored —

CVE-2015-8126 EPSS 10%

Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2…

fltk libpng Ubuntu Azure Linux

Nov 13, 2015
Unscored —

CVE-2015-8472

Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x befor…

fltk libpng1.6 libpng Debian Ubuntu Azure Linux

Jan 21, 2016