Summary
USN-5432-1 fixed vulnerabilities in libpng.
This update provides the corresponding updates for libpng1.6.
Original advisory details:
It was discovered that libpng incorrectly handled memory when parsing
certain PNG files. If a user or automated system were tricked into opening
a specially crafted PNG file, an attacker could use this issue to cause
libpng to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2017-12652)
Zhengxiong Luo discovered that libpng incorrectly handled memory when parsing
certain PNG files. If a user or automated system were tricked into opening
a specially crafted PNG file, an attacker could use this issue to cause
libpng to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2018-14048)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libpng1.6 | 1.6.20-2ubuntu0.1~esm1 |
Vulnerabilities 2
-
Critical 9.8
libpng before 1.6.32 does not properly check the length of chunks against the user limit.
-
Unscored —
An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommend…