FEDORA-2017-e56a2ddd09 — security update for optipng

stable

optipng-0.7.6-5.fc27

FEDORA-2017-e56a2ddd09 created by till 7 years ago for Fedora 27

Security fix for CVE-2017-1000229 and CVE-2017-16938

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-e56a2ddd09

This update has been submitted for testing by till.

7 years ago

This update has been pushed to testing.

7 years ago

cserpentis commented & provided feedback 7 years ago

karma

works for me

hanecak provided feedback 6 years ago

karma

This update has been submitted for batched by bodhi.

6 years ago

This update has been submitted for stable by bodhi.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

6 years ago

Builds

optipng-0.7.6-5.fc27

BZ#1520227 CVE-2017-16938 optipng: global buffer overflow in gifread.c:LZWReadByte when parsing malicious GIF

BZ#1520230 CVE-2017-16938 optipng: global buffer overflow in gifread.c:LZWReadByte when parsing malicious GIF [fedora-all]

BZ#1520234 CVE-2017-1000229 optipng: integer overflow in tiffread.c:minitiff_read_info() leading to denial of service

BZ#1520235 CVE-2017-1000229 optipng: integer overflow in tiffread.c:minitiff_read_info() leading to denial of service [fedora-all]

optipng-0.7.6-5.fc27

Automated Test Results

None