The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processing a crafted PNG file, leading to a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjdk8Upgrade openjdk7 | Aug 22, 2024 | Jul 9, 2018 |
| Azul Zulu | — | Apply legacy security update: Azul Zulu JDK 7 installer 7.25 (JDK 7u201, quarterly CPU) — Azul Legacy Production SupportUpgrade to Azul Zulu JDK 11 installer 11.2 (JDK 11.0.1, PSU) (LTS stream)Apply legacy security update: Azul Zulu JDK 6 installer 6.22 (JDK 6u119, quarterly CPU) — Azul Legacy Production SupportUpgrade to Azul Zulu JDK 8 installer 8.32 (JDK 8u191, quarterly CPU) (LTS stream) | Jul 9, 2018 | Jul 9, 2018 |
| Centos_linux | — | Upgrade java-1.8.0-ibm-pluginUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibmUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-develUpgrade java-1.8.0-ibm-demoUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-demoUpgrade java-1.8.0-ibm-srcUpgrade java-1.7.1-ibm-src | Aug 28, 2019 | Jul 9, 2018 |
| Debian | — | Upgrade libpng1.6 | Jul 30, 2024 | Jul 9, 2018 |
| Gentoo Linux | — | Upgrade dev-java/oracle-jdk-bin.Upgrade dev-java/oracle-jre-bin. | Aug 16, 2019 | Jul 9, 2018 |
| Ibm Aix | — | Apply the fix or workaround for java_oct2018_advisory | Dec 18, 2018 | Jul 9, 2018 |
| Ibm Java | — | Upgrade IBM Java to version 6.0.16.75Upgrade IBM Java to version 7.1.4.35Upgrade IBM Java to version 8.0.5.25Upgrade IBM Java to version 6.1.8.75Upgrade IBM Java to version 7.0.10.35 | Oct 20, 2026 | Oct 20, 2026 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 18, 2018 | Jul 9, 2018 |
| Redhat_linux | — | Upgrade java-1.8.0-ibm-pluginNo solution existsUpgrade java-1.8.0-ibmUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-srcUpgrade java-1.7.1-ibm-srcUpgrade java-1.7.1-ibm-pluginUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibm-demoUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibmUpgrade java-1.7.1-ibm-devel | Nov 12, 2018 | Jul 9, 2018 |
| Suse | — | Upgrade libpng16-16-32bitUpgrade libpng16-compat-devel-32bitUpgrade java-1_7_1-ibm-develUpgrade java-1_8_0-ibm-pluginUpgrade java-1_7_0-openjdk-demoUpgrade java-1_8_0-ibm-develUpgrade java-1_7_0-ibm-develUpgrade java-1_8_0-openjdk-demoUpgrade java-1_8_0-openjdk-javadocUpgrade java-1_7_0-ibm-jdbcUpgrade libpng16-toolsUpgrade libpng16-compat-develUpgrade java-1_8_0-openjdk-accessibilityUpgrade java-1_7_1-ibm-jdbcUpgrade libpng16-16Upgrade java-1_8_0-openjdk-srcUpgrade java-1_8_0-openjdkUpgrade java-1_7_0-ibmUpgrade libpng16-develUpgrade java-1_8_0-ibmUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_1-ibm-alsaUpgrade java-1_7_0-ibm-alsaUpgrade java-1_7_0-ibm-pluginUpgrade java-1_7_1-ibmUpgrade libpng16-devel-32bitUpgrade java-1_7_0-openjdkUpgrade java-1_7_0-openjdk-headlessUpgrade java-1_8_0-ibm-alsaUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_7_0-openjdk-develUpgrade java-1_8_0-openjdk-devel | Nov 28, 2018 | Jul 9, 2018 |
| Ubuntu | — | Upgrade libpng16-16 | Jul 24, 2018 | Jul 9, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 9, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub