Ubuntu Security Notice USN-5432-1 ≈ Packet Storm

Home ^[1] Files ^[2] News ^[3] Contact ^[4] Add New ^[5]

Ubuntu Security Notice USN-5432-1^[6]: Authored by Ubuntu ^[7] | Site security.ubuntu.com ^[8]; Ubuntu Security Notice 5432-1 - It was discovered that libpng incorrectly handled memory when parsing certain PNG files. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial of service, or possible execute arbitrary code. Zhengxiong Luo discovered that libpng incorrectly handled memory when parsing certain PNG files. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial of service, or possible execute arbitrary code.; systems | linux ^[9], ubuntu ^[10]; advisories | CVE-2017-12652 ^[11], CVE-2018-14048 ^[12]; SHA-256 | 54ca6d5730b37e6ead16f7d5e371061160c7f46a81e138b8550d769c11bfd6ea; Download ^[13] | Favorite ^[14] | View ^[15]

        ==========================================================================
Ubuntu Security Notice USN-5432-1
May 23, 2022
libpng vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 ESM
Summary:
Several security issues were fixed in libpng.
Software Description:
- libpng: PNG (Portable Network Graphics) file library
Details:
It was discovered that libpng incorrectly handled memory when parsing
certain PNG files. If a user or automated system were tricked into opening
a specially crafted PNG file, an attacker could use this issue to cause
libpng to crash, resulting in a denial of service, or possible execute
arbitrary code. (CVE-2017-12652)
Zhengxiong Luo discovered that libpng incorrectly handled memory when parsing
certain PNG files. If a user or automated system were tricked into opening
a specially crafted PNG file, an attacker could use this issue to cause
libpng to crash, resulting in a denial of service, or possible execute
arbitrary code. (CVE-2018-14048)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 ESM:
libpng12-0                      1.2.54-1ubuntu1.1+esm1
libpng12-dev                    1.2.54-1ubuntu1.1+esm1
libpng3                         1.2.54-1ubuntu1.1+esm1
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5432-1
CVE-2017-12652, CVE-2018-14048