MGASA-2015-0008

Source
https://advisories.mageia.org/MGASA-2015-0008.html
Import Source
https://advisories.mageia.org/MGASA-2015-0008.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2015-0008
Related
Published
2015-01-07T15:14:58Z
Modified
2015-01-07T15:05:28Z
Summary
Updated libpng packages fix CVE-2014-9495
Details

Updated libpng packages fix security vulnerability:

libpng versions 1.6.9 through 1.6.15 have an integer-overflow vulnerability in pngcombinerow() when decoding very wide interlaced images, which can allow an attacker to overwrite an arbitrary amount of memory with arbitrary (attacker-controlled) data (CVE-2014-9495).

References
Credits

Affected packages