USN-3962-1: libpng vulnerability
It was discovered that libpng incorrectly handled certain memory operations. If a user or automated system were tricked into opening a specially crafted PNG file, a remote attacker could use this issue to cause libpng to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libpng16-16to a version that resolves this vulnerability.Fixed in 1.6.34-2ubuntu0.1 - Upgrade
Upgrade
ubuntu/libpng16-16to a version that resolves this vulnerability.Fixed in 1.6.34-1ubuntu0.18.04.2
Event History
Frequently Asked Questions
What is the vulnerability ID for this libpng vulnerability?
The vulnerability ID for this libpng vulnerability is CVE-2019-7317.
What is the severity of the libpng vulnerability?
The severity of the libpng vulnerability is high.
How does the libpng vulnerability affect systems?
If a user or automated system opens a specially crafted PNG file, a remote attacker could cause libpng to crash or execute arbitrary code, resulting in a denial of service.
How can I fix the libpng vulnerability on Ubuntu 18.10?
To fix the libpng vulnerability on Ubuntu 18.10, you need to update the libpng16-16 package to version 1.6.34-2ubuntu0.1 or later.
How can I fix the libpng vulnerability on Ubuntu 18.04?
To fix the libpng vulnerability on Ubuntu 18.04, you need to update the libpng16-16 package to version 1.6.34-1ubuntu0.18.04.2 or later.