Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 519
Alerts This Week
Warning Icon 1 519

openSUSE: 2015:2100-1 Important: Libpng16 Buffer Overflow Resolution

opensuse
Calendar Grey November 25, 2015
Dist Opensuse Esm H88
A crucial patch for Fedora has been released to fix a jpeg buffer overflow security flaw.
An update that fixes one vulnerability is now available.

Description

The libpng16 package was updated to fix the following security issues:

- CVE-2015-8126: Fixed a buffer overflow vulnerabilities in

png_get_PLTE/png_set_PLTE functions (bsc#954980).

Topics%20covered

Topics Covered

security advisory buffer overflow important patch openSUSE libpng16

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 13.2:

zypper in -t patch openSUSE-2015-801=1

- openSUSE 13.1:

zypper in -t patch openSUSE-2015-801=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 13.2 (i586 x86_64):

libpng16-16-1.6.13-2.7.1

libpng16-16-debuginfo-1.6.13-2.7.1

libpng16-compat-devel-1.6.13-2.7.1

libpng16-debugsource-1.6.13-2.7.1

libpng16-devel-1.6.13-2.7.1

libpng16-tools-1.6.13-2.7.1

libpng16-tools-debuginfo-1.6.13-2.7.1

- openSUSE 13.2 (x86_64):

libpng16-16-32bit-1.6.13-2.7.1

libpng16-16-debuginfo-32bit-1.6.13-2.7.1

libpng16-compat-devel-32bit-1.6.13-2.7.1

libpng16-devel-32bit-1.6.13-2.7.1

- openSUSE 13.1 (i586 x86_64):

libpng16-16-1.6.6-19.1

libpng16-16-debuginfo-1.6.6-19.1

libpng16-compat-devel-1.6.6-19.1

libpng16-debugsource-1.6.6-19.1

libpng16-devel-1.6.6-19.1

libpng16-tools-1.6.6-19.1

libpng16-tools-debuginfo-1.6.6-19.1

- openSUSE 13.1 (x86_64):

libpng16-16-32bit-1.6.6-19.1

libpng16-16-debuginfo-32bit-1.6.6-19.1

libpng16-compat-devel-32bit-1.6.6-19.1

libpng16-devel-32bit-1.6.6-19.1

References

https://www.suse.com/security/cve/CVE-2015-8126.html

https://bugzilla.suse.com/954980

--

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2015:2100-1
Rating: important
Affected Products: openSUSE 13.2 openSUSE 13.1

Topics%20covered

Topics Covered

security advisory buffer overflow important patch openSUSE libpng16

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.