Brian Carpenter discovered that pngcrush incorrectly handled specially crafted file. An attacker could possibly use this issue to cause a denial of service.
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_version": "1.7.85-1ubuntu0.1~esm1", "binary_name": "pngcrush" }, { "binary_version": "1.7.85-1ubuntu0.1~esm1", "binary_name": "pngcrush-dbgsym" } ] }