ArchLinux: 201904-10: libpng: denial of service
Summary
png_image_free in png.c in libpng 1.6.36 has a use-after-free because png_image_free_function is called under png_safe_execute.
Resolution
Upgrade to 1.6.37-1.
# pacman -Syu "libpng>=1.6.37-1"
The problem has been fixed upstream in version 1.6.37.
References
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803 https://github.com/pnggroup/libpng/issues/275 https://security.archlinux.org/CVE-2019-7317
Workaround
None.