ALT Linux Team

Package libpng update in sisyphus on 2015-11-18

ALT-PU-2015-2013-1

Package libpng updated to version 1.5.24-alt1 for branch sisyphus in task 153437.

Closed vulnerabilities

Published: 2015-11-13

BDU:2015-12011

Уязвимости библиотеки libpng, позволяющие нарушителю вызвать отказ в обслуживании

Severity: HIGH (7.5)
References:
Published: 2015-11-13
Modified: 2024-11-21

CVE-2015-8126

Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.

Severity: HIGH (7.5)
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top