png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjdk8Upgrade openjdk11Upgrade firefox-esrUpgrade libpng | May 7, 2019 | Feb 4, 2019 |
| Amazon Linux Ami 2 | — | Upgrade java-11-amazon-corretto-javadocUpgrade java-11-amazon-corretto-headlessUpgrade thunderbirdUpgrade thunderbird-debuginfoUpgrade java-11-amazon-corretto | Apr 27, 2020 | Feb 4, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 4, 2019 |
| Azul Zulu | — | Apply Azul Zulu JDK 12 installer 12.3 (JDK 12.0.2+3, PSU) (short-term support); migrate to JDK 17 (LTS)Upgrade to Azul Zulu JDK 8 installer 8.39 (JDK 8u221-b08, quarterly CPU) (LTS stream)Apply legacy security update: Azul Zulu JDK 7 installer 7.30 (JDK 7u231-b5, quarterly CPU) — Azul Legacy Production SupportUpgrade to Azul Zulu JDK 11 installer 11.32 (JDK 11.0.3.0.101+11, quarterly CPU) (LTS stream) | Feb 4, 2019 | Feb 4, 2019 |
| Centos_linux | — | Upgrade thunderbird-debuginfoUpgrade java-1.8.0-ibmUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-jdbcUpgrade thunderbirdUpgrade java-1.7.1-ibmUpgrade thunderbird-debugsourceUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibm-pluginUpgrade firefox-debuginfoUpgrade firefox-debugsourceUpgrade satelliteUpgrade firefoxUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-demoUpgrade java-1.7.1-ibm-demoUpgrade satellite-brandingUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-webstartUpgrade java-1.7.1-ibm-jdbcUpgrade java-1.7.1-ibm-src | May 31, 2019 | Feb 4, 2019 |
| Debian | — | Upgrade thunderbirdUpgrade libpng1.6Upgrade firefox-esr | Apr 29, 2019 | Feb 4, 2019 |
| Freebsd | — | Upgrade seamonkeyUpgrade linux-firefoxUpgrade waterfoxUpgrade linux-seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade libxulUpgrade linux-thunderbirdUpgrade firefox-esr | May 23, 2019 | May 22, 2019 |
| Gentoo Linux | — | Upgrade media-libs/libpng. | Aug 6, 2019 | Feb 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libpngUpgrade libpng-devel | Jul 26, 2019 | Feb 4, 2019 |
| Ibm Aix | — | Apply the fix or workaround for java_july2019_advisory | Oct 11, 2019 | Feb 4, 2019 |
| Ibm Java | — | Upgrade IBM Java to version 7.1.4.50Upgrade IBM Java to version 8.0.5.40Upgrade IBM Java to version 7.0.10.50 | Oct 20, 2026 | Oct 20, 2026 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Aug 1, 2019 | Feb 4, 2019 |
| Mfsa2019 13 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 67.0 | May 22, 2019 | Feb 4, 2019 |
| Mfsa2019 14 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 60.7 | May 22, 2019 | Feb 4, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 60.7Upgrade to the latest version of Mozilla Thunderbird | May 23, 2019 | Feb 4, 2019 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 1.6.37 | Apr 27, 2022 | Feb 4, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/gsx to version 9.53.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-base to version 1.16.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/qt5 to version 5.12.9-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-lisp to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/library/openjpeg2 to version 2.3.1-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-no-x11 to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 60.7.0-11.4.10.0.1.2.0 on Solaris 11.4Upgrade library/desktop/gstreamer-1/gst-plugins-good to version 1.16.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade mail/thunderbird to version 60.7.0-11.4.10.0.1.2.0 on Solaris 11.4Upgrade library/desktop/libgxps to version 0.3.1-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/library/libpng16 to version 1.6.37-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/imagemagick to version 6.9.10.91-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-gtk to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade print/filter/poppler to version 20.10.0-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/library/libwebp to version 1.1.0-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/ghostscript to version 9.53.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade desktop/pdf-viewer/poppler-viewer to version 20.10.0-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/analytics/webalizer to version 2.23.8-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/browser/firefox to version 60.7.0-11.4.10.0.1.2.0 on Solaris 11.4Upgrade library/desktop/search/tracker to version 2.3.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.23-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/xcursorgen to version 1.0.7-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/gd to version 2.2.5-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/graphics/wxwidgets to version 3.0.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade system/library/freetype-2 to version 2.10.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade web/php-74 to version 7.4.11-11.4.30.0.1.88.0 on Solaris 11.4Upgrade codec/libtheora to version 1.1.1-11.4.30.0.1.88.0 on Solaris 11.4Upgrade editor/gnu-emacs/gnu-emacs-x11 to version 26.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 60.7.0-11.4.10.0.1.2.0 on Solaris 11.4Upgrade x11/library/toolkit/fltk to version 1.3.5-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/rrdtool to version 1.7.0-11.4.30.0.0.88.0 on Solaris 11.4Upgrade library/desktop/gdk-pixbuf to version 2.39.2-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/desktop/webkitgtk4 to version 2.30.3-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/graphics/pixman to version 0.38.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade image/gnuplot to version 5.2.2-11.4.30.0.1.88.0 on Solaris 11.4 | Jun 26, 2019 | Feb 4, 2019 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefox | May 24, 2019 | Jan 25, 2019 |
| Redhat_linux | — | Upgrade java-1.8.0-ibmUpgrade thunderbird-debugsourceUpgrade java-1.8.0-ibm-pluginUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.7.1-ibm-pluginUpgrade java-1.7.1-ibm-srcUpgrade firefox-debuginfoUpgrade java-1.7.1-ibm-jdbcUpgrade firefox-debugsourceUpgrade java-1.7.1-ibm-develUpgrade java-1.8.0-ibm-headlessUpgrade java-1.8.0-ibm-develUpgrade java-1.7.1-ibm-demoUpgrade firefoxUpgrade thunderbirdUpgrade java-1.8.0-ibm-demoUpgrade java-1.8.0-ibm-srcNo solution existsUpgrade thunderbird-debuginfoUpgrade java-1.7.1-ibmUpgrade java-1.8.0-ibm-webstart | May 24, 2019 | Feb 4, 2019 |
| Suse | — | Upgrade java-11-openjdk-javadocUpgrade MozillaFirefox-translations-commonUpgrade libpng16-16-32bitUpgrade MozillaFirefoxUpgrade java-11-openjdkUpgrade java-11-openjdk-accessibilityUpgrade libpng16-16Upgrade java-1_8_0-openjdk-develUpgrade java-1_8_0-openjdk-accessibilityUpgrade java-1_8_0-openjdk-javadocUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-translations-commonUpgrade java-1_8_0-openjdk-demoUpgrade java-1_8_0-ibmUpgrade libpng16-develUpgrade java-1_8_0-openjdk-srcUpgrade java-1_8_0-openjdkUpgrade java-1_7_1-ibm-jdbcUpgrade libpng16-toolsUpgrade java-1_8_0-ibm-pluginUpgrade mozillafirefox-buildsymbolsUpgrade java-11-openjdk-develUpgrade java-11-openjdk-demoUpgrade mozillafirefox-branding-upstreamUpgrade java-1_8_0-openjdk-headlessUpgrade libpng16-devel-32bitUpgrade java-1_7_0-openjdk-headlessUpgrade java-11-openjdk-srcUpgrade java-1_7_0-openjdk-demoUpgrade java-1_8_0-ibm-alsaUpgrade java-11-openjdk-jmodsUpgrade java-1_7_0-openjdk-develUpgrade MozillaThunderbird-buildsymbolsUpgrade libpng16-compat-develUpgrade java-1_8_0-ibm-develUpgrade java-1_7_1-ibm-develUpgrade java-1_7_1-ibm-alsaUpgrade MozillaFirefox-develUpgrade java-1_7_1-ibm-pluginUpgrade java-1_7_0-openjdkUpgrade libpng16-compat-devel-32bitUpgrade java-11-openjdk-headlessUpgrade java-1_7_1-ibm | May 31, 2019 | Feb 4, 2019 |
| Ubuntu | — | Upgrade openjdk-11-jreUpgrade openjdk-8-jreUpgrade firefoxUpgrade openjdk-11-jdkUpgrade openjdk-8-jdkUpgrade libpng12-0 (Ubuntu Pro)Upgrade thunderbirdUpgrade libpng16-dev (Ubuntu Pro)Upgrade libpng16-tools (Ubuntu Pro)Upgrade libpng16-devtools (Ubuntu Pro)Upgrade libpng16-16Upgrade openjdk-11-jre-zeroUpgrade libpng12-dev (Ubuntu Pro)Upgrade openjdk-8-jre-zeroUpgrade libpng3 (Ubuntu Pro)Upgrade openjdk-8-jdk-headlessUpgrade openjdk-11-jre-headlessUpgrade openjdk-11-jdk-headlessUpgrade openjdk-8-jre-jamvmUpgrade openjdk-8-jre-headlessUpgrade libpng16-16 (Ubuntu Pro) | May 4, 2019 | Feb 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 4, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub