MGASA-2019-0128

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2019-0128.html

Import Source

https://advisories.mageia.org/MGASA-2019-0128.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2019-0128

Related

CVE-2019-9210

Published

2019-04-05T18:12:59Z

Modified

2019-04-05T17:36:46Z

Summary

Updated advancecomp packages fix security vulnerability

Details

advancecomp has been updated to fix a security issue that could be triggered when pressented with a malformed PNG file. advancecomp contained an integer overflow upon encountering an invalid PNG size, which could result in a buffer overflow (CVE-2019-9210), as well as a heap-based buffer over-read.

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:6 / advancecomp

Package

Name: advancecomp
Purl: pkg:rpm/mageia/advancecomp?distro=mageia-6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.20-3.3.mga6

Ecosystem specific

{
    "section": "core"
}