Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Fedora: 2016:0014-1 Critical: libpng12 Buffer Overflow Threat

fedora
Calendar Grey January 2, 2016
Dist Fedora Esm H88
Keep abreast of the most recent security improvements and patches addressing libpng12 flaws in Fedora 22.
Latest upstream release, includes fixes for security vulnerabilities: CVE-2015-7981, CVE-2015-8126, CVE-2015-8540

Summary

The libpng12 package provides libpng 1.2, an older version of the libpng

library for manipulating PNG (Portable Network Graphics) image format files.

This version should be used only if you are unable to use the current

version of libpng.

Update Information:

Latest upstream release, includes fixes for security vulnerabilities: CVE-2015-7981, CVE-2015-8126, CVE-2015-8540

Topics%20covered

Topics Covered

security advisory buffer overflow software update Fedora security fix image processing

Change Log

References


[ 1 ] Bug #1291312 - CVE-2015-8540 libpng: underflow read in png_check_keyword() https://bugzilla.redhat.com/show_bug.cgi?id=1291312 [ 2 ] Bug #1281756 - CVE-2015-8126 CVE-2015-8472 libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions https://bugzilla.redhat.com/show_bug.cgi?id=1281756 [ 3 ] Bug #1276416 - CVE-2015-7981 libpng: Out-of-bounds read in png_convert_to_rfc1123 https://bugzilla.redhat.com/show_bug.cgi?id=1276416

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update libpng12' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libpng12
Product: Fedora 22
Version: 1.2.56
Release: 1.fc22
URL: http://www.libpng.org/pub/png/
Summary: Old version of libpng, needed to run old binaries

Topics%20covered

Topics Covered

security advisory buffer overflow software update Fedora security fix image processing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here