MGASA-2015-0008

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2015-0008.html

Import Source

https://advisories.mageia.org/MGASA-2015-0008.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2015-0008

Related

CVE-2014-9495

Published

2015-01-07T15:14:58Z

Modified

2015-01-07T15:05:28Z

Summary

Updated libpng packages fix CVE-2014-9495

Details

Updated libpng packages fix security vulnerability:

libpng versions 1.6.9 through 1.6.15 have an integer-overflow vulnerability in pngcombinerow() when decoding very wide interlaced images, which can allow an attacker to overwrite an arbitrary amount of memory with arbitrary (attacker-controlled) data (CVE-2014-9495).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:4 / libpng

Package

Name: libpng
Purl: pkg:rpm/mageia/libpng?distro=mageia-4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.6.16-1.mga4

Ecosystem specific

{
    "section": "core"
}