USN-5432-1 fixed vulnerabilities in libpng. This update provides the corresponding updates for libpng1.6.
Original advisory details:
It was discovered that libpng incorrectly handled memory when parsing certain PNG files. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-12652)
Zhengxiong Luo discovered that libpng incorrectly handled memory when parsing certain PNG files. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-14048)
{ "binaries": [ { "binary_name": "libpng16-16", "binary_version": "1.6.20-2ubuntu0.1~esm1" }, { "binary_name": "libpng16-16-dbgsym", "binary_version": "1.6.20-2ubuntu0.1~esm1" }, { "binary_name": "libpng16-16-udeb", "binary_version": "1.6.20-2ubuntu0.1~esm1" }, { "binary_name": "libpng16-16-udeb-dbgsym", "binary_version": "1.6.20-2ubuntu0.1~esm1" }, { "binary_name": "libpng16-dev", "binary_version": "1.6.20-2ubuntu0.1~esm1" }, { "binary_name": "libpng16-devtools", "binary_version": "1.6.20-2ubuntu0.1~esm1" }, { "binary_name": "libpng16-tools", "binary_version": "1.6.20-2ubuntu0.1~esm1" }, { "binary_name": "libpng16-tools-dbgsym", "binary_version": "1.6.20-2ubuntu0.1~esm1" } ], "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }