Advisories » MGASA-2015-0489

Updated libpng12 packages fix security vulnerability

Publication date: 28 Dec 2015
Modification date: 28 Dec 2015
Type: security
Affected Mageia releases : 5
CVE: CVE-2015-8540

Description

There is a underflow read in png_check_keyword() in pngwutil.c in libpng 1.2.x
before 1.2.56 (CVE-2015-8540).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=17332
• http://openwall.com/lists/oss-security/2015/12/11/1
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8540

SRPMS

5/core

• libpng12-1.2.56-1.mga5