An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libpng | Aug 22, 2024 | Jul 10, 2019 |
| Debian | — | Upgrade libpng1.6 | Jul 30, 2024 | Jul 10, 2019 |
| Gentoo Linux | — | Upgrade media-libs/libpng. | Aug 6, 2019 | Jul 10, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libpng-develUpgrade libpng | Jan 3, 2020 | Jul 10, 2019 |
| Oracle Solaris | — | Upgrade library/desktop/search/tracker to version 2.3.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade x11/library/toolkit/fltk to version 1.3.5-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/analytics/webalizer to version 2.23.8-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/qt5 to version 5.12.9-11.4.30.0.1.88.0 on Solaris 11.4Upgrade desktop/pdf-viewer/poppler-viewer to version 20.10.0-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-no-x11 to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/library/openjpeg2 to version 2.3.1-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/imagemagick to version 6.9.10.91-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/gdk-pixbuf to version 2.39.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/rrdtool to version 1.7.0-11.4.30.0.0.88.0 on Solaris 11.4Upgrade library/graphics/pixman to version 0.38.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-x11 to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-lisp to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/php-74 to version 7.4.11-11.4.30.0.1.88.0 on Solaris 11.4Upgrade system/library/freetype-2 to version 2.10.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade codec/libtheora to version 1.1.1-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-base to version 1.16.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/gd to version 2.2.5-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-good to version 1.16.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade print/filter/poppler to version 20.10.0-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-gtk to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/webkitgtk4 to version 2.30.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/library/libpng16 to version 1.6.37-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/ghostscript to version 9.53.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/xcursorgen to version 1.0.7-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/libgxps to version 0.3.1-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/library/libwebp to version 1.1.0-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.23-11.4.30.0.1.88.0 on Solaris 11.4Upgrade desktop/pdf-viewer/gsx to version 9.53.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/gnuplot to version 5.2.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/graphics/wxwidgets to version 3.0.3-11.4.30.0.1.88.0 on Solaris 11.4 | Feb 17, 2021 | Jul 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub