UbuntuUpdates.org

Package "libpng-dev"

Name: libpng-dev

Description:

PNG library - development (version 1.6)
Latest version: 1.6.34-1ubuntu0.18.04.2
Release: bionic (18.04)
Level: security
Repository: main
Head package: libpng1.6
Homepage: http://libpng.org/pub/png/libpng.html

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libpng-dev"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libpng-dev" in Bionic

Repository Area Version
base main 1.6.34-1
updates main 1.6.34-1ubuntu0.18.04.2

Changelog

Version: 1.6.34-1ubuntu0.18.04.2 2019-04-30 19:06:26 UTC

  libpng1.6 (1.6.34-1ubuntu0.18.04.2) bionic-security; urgency=medium

  * SECURITY UPDATE: use after free in png_image_free
    - debian/patches/CVE-2019-7317.patch: call png_image_free_function
      without guarding it with png_safe_execute in png.c.
    - CVE-2019-7317

 -- Marc Deslauriers <email address hidden> Tue, 30 Apr 2019 10:56:15 -0400
Source diff to previous version
CVE-2019-7317 png_image_free in png.c in libpng 1.6.36 has a use-after-free because png_image_free_function is called under png_safe_execute.

Version: 1.6.34-1ubuntu0.18.04.1 2018-07-11 15:07:06 UTC

  libpng1.6 (1.6.34-1ubuntu0.18.04.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-13785.patch: fix a divide by zero in
      pngrutil.c.
    - CVE-2018-13785

 -- <email address hidden> (Leonidas S. Barbosa) Tue, 10 Jul 2018 15:37:59 -0300
CVE-2018-13785 In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant


About   -   Send Feedback to @ubuntu_updates