Low ELSA-2020-3901 1 CVE

Low: libpng security update (Oracle Linux 7)

Published Oct 6, 2020 · Updated Oct 6, 2020

Ecosystem: Oracle Linux

Summary

[2:1.5.13-8]
- Fix CVE-2017-12652
- Resolves: #1744870

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	libpng	2:1.5.13-8.el7
Oracle Linux · 7	libpng-devel	2:1.5.13-8.el7
Oracle Linux · 7	libpng-static	2:1.5.13-8.el7

Vulnerabilities 1

Critical 9.8

CVE-2017-12652

libpng before 1.6.32 does not properly check the length of chunks against the user limit.

openjpeg2 fltk libpng1.6 libpng1.6 Debian Ubuntu Azure Linux

Jul 10, 2019