Vulnerability Name:

CVE-2006-5793 (CCN-30290)

Assigned:2006-11-14
Published:2006-11-14
Updated:2018-10-17
Summary:The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:2.6 Low (CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P)
1.9 Low (Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-20
Vulnerability Consequences:Denial of Service
References:Source: CONFIRM
Type: UNKNOWN
http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html

Source: MISC
Type: Patch
http://bugs.gentoo.org/attachment.cgi?id=101400&action=view

Source: CCN
Type: Gentoo Bugzilla Bug 154380
media-libs/libpng: sPLT chunk handling denial of service (CVE-2006-5793)

Source: MISC
Type: Patch
http://bugs.gentoo.org/show_bug.cgi?id=154380

Source: MITRE
Type: CNA
CVE-2006-5793

Source: CCN
Type: Apple Web site
About Security Update 2008-002

Source: CONFIRM
Type: UNKNOWN
http://docs.info.apple.com/article.html?artnum=307562

Source: APPLE
Type: UNKNOWN
APPLE-SA-2008-03-18

Source: CCN
Type: RHSA-2007-0356
Moderate: libpng security update

Source: SECUNIA
Type: Patch, Vendor Advisory
22889

Source: CCN
Type: SA22900
libpng sPLT Chunk Handling Denial of Service

Source: SECUNIA
Type: Patch, Vendor Advisory
22900

Source: SECUNIA
Type: Vendor Advisory
22941

Source: SECUNIA
Type: Vendor Advisory
22950

Source: SECUNIA
Type: Vendor Advisory
22951

Source: SECUNIA
Type: Patch, Vendor Advisory
22956

Source: SECUNIA
Type: Patch, Vendor Advisory
22958

Source: SECUNIA
Type: Vendor Advisory
23208

Source: SECUNIA
Type: Vendor Advisory
23335

Source: SECUNIA
Type: Vendor Advisory
25329

Source: CCN
Type: SA25742
Avaya Products libpng tRNS/sPLT Chunk Denial of Service

Source: SECUNIA
Type: Vendor Advisory
25742

Source: CCN
Type: SA29420
Mac OS X Security Update Fixes Multiple Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
29420

Source: GENTOO
Type: Patch, Vendor Advisory
GLSA-200611-09

Source: CCN
Type: SECTRACK ID: 1017244
libpng Read Error in png_set_sPLT() Lets Remote Users Deny Service

Source: SECTRACK
Type: UNKNOWN
1017244

Source: SLACKWARE
Type: UNKNOWN
SSA:2006-335-03

Source: CONFIRM
Type: Patch
http://sourceforge.net/project/shownotes.php?release_id=464278

Source: CONFIRM
Type: UNKNOWN
http://support.avaya.com/elmodocs2/security/ASA-2007-254.htm

Source: CCN
Type: ASA-2007-254
libpng security update (RHSA-2007-0356)

Source: CCN
Type: CORE-2008-0124
Multiple vulnerabilities in Google's Android SDK

Source: MISC
Type: UNKNOWN
http://www.coresecurity.com/?action=item&id=2148

Source: CCN
Type: GLSA-200611-09
libpng: Denial of Service

Source: MANDRIVA
Type: UNKNOWN
MDKSA-2006:209

Source: MANDRIVA
Type: UNKNOWN
MDKSA-2006:210

Source: MANDRIVA
Type: UNKNOWN
MDKSA-2006:211

Source: MANDRIVA
Type: UNKNOWN
MDKSA-2006:212

Source: SUSE
Type: UNKNOWN
SUSE-SR:2006:028

Source: CCN
Type: OpenPKG-SA-2006.036
libpng

Source: OPENPKG
Type: UNKNOWN
OpenPKG-SA-2006.036

Source: REDHAT
Type: UNKNOWN
RHSA-2007:0356

Source: BUGTRAQ
Type: UNKNOWN
20061115 rPSA-2006-0211-1 libpng

Source: BUGTRAQ
Type: UNKNOWN
20061204 rPSA-2006-0211-2 doxygen libpng

Source: BUGTRAQ
Type: UNKNOWN
20080304 CORE-2008-0124: Multiple vulnerabilities in Google's Android SDK

Source: BID
Type: UNKNOWN
21078

Source: CCN
Type: BID-21078
The 'libpng' Graphics Library PNG_SET_SPLT Remote Denial of Service Vulnerability

Source: TRUSTIX
Type: UNKNOWN
2006-0065

Source: CCN
Type: TLSA-2007-45
Denial of service

Source: CCN
Type: TLSA-2007-49
Denial of service attack

Source: CCN
Type: USN-383-1
libpng vulnerability

Source: UBUNTU
Type: Patch
USN-383-1

Source: VUPEN
Type: Vendor Advisory
ADV-2006-4521

Source: VUPEN
Type: Vendor Advisory
ADV-2006-4568

Source: VUPEN
Type: Vendor Advisory
ADV-2008-0924

Source: XF
Type: UNKNOWN
libpng-pngsetsplt-dos(30290)

Source: XF
Type: UNKNOWN
libpng-pngsetsplt-dos(30290)

Source: CONFIRM
Type: Patch
https://issues.rpath.com/browse/RPL-790

Source: CONFIRM
Type: UNKNOWN
https://issues.rpath.com/browse/RPL-824

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:10324

Source: SUSE
Type: SUSE-SR:2006:028
SUSE Security Summary Report

Vulnerable Configuration:Configuration 1:
  • cpe:/a:greg_roelofs:libpng:1.0.6:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.0.7:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.0.8:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.0.9:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.2.0:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.2.5:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.2.6:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.2.7:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.2.7rc1:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.2.8:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.2.9:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.2.10:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.2.11:*:*:*:*:*:*:*
  • OR cpe:/a:greg_roelofs:libpng:1.2.12:*:*:*:*:*:*:*

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

    • Configuration RedHat 6:
  • cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

    • Configuration RedHat 7:
  • cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

    • Configuration RedHat 8:
  • cpe:/o:redhat:enterprise_linux:5::client_workstation:*:*:*:*:*

    • Configuration RedHat 9:
  • cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20065793
    V
    		CVE-2006-5793
    2022-06-30
    oval:org.opensuse.security:def:42371
    P
    		Security update for cifs-utils (Important)
    2022-04-27
    oval:org.opensuse.security:def:42167
    P
    		Security update for salt (Important)
    2022-03-30
    oval:org.opensuse.security:def:112773
    P
    		libpng12-0-1.2.59-1.9 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:112775
    P
    		libpng16-16-1.6.37-3.3 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:26227
    P
    		Security update for the Linux Kernel (Important)
    2022-01-13
    oval:org.opensuse.security:def:31374
    P
    		Security update for libsndfile (Important)
    2022-01-05
    oval:org.opensuse.security:def:32251
    P
    		Security update for xorg-x11-server (Important)
    2021-12-20
    oval:org.opensuse.security:def:26184
    P
    		Security update for log4j (Important)
    2021-12-17
    oval:org.opensuse.security:def:31313
    P
    		Security update for ruby2.1 (Important)
    2021-12-01
    oval:org.opensuse.security:def:106244
    P
    		Security update for busybox (Important)
    2021-10-27
    oval:org.opensuse.security:def:32207
    P
    		Security update for util-linux (Moderate)
    2021-10-19
    oval:org.opensuse.security:def:26144
    P
    		Security update for libqt5-qtsvg (Moderate)
    2021-10-11
    oval:org.opensuse.security:def:31282
    P
    		Security update for webkit2gtk3 (Important)
    2021-10-06
    oval:org.opensuse.security:def:106246
    P
    		libpng16-16-1.6.37-3.3 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:31687
    P
    		Security update for sqlite3 (Important)
    2021-09-23
    oval:org.opensuse.security:def:32185
    P
    		Security update for ghostscript (Critical)
    2021-09-21
    oval:org.opensuse.security:def:31681
    P
    		Security update for gtk-vnc (Moderate)
    2021-09-16
    oval:org.opensuse.security:def:31676
    P
    		Security update for openexr (Important)
    2021-09-02
    oval:org.opensuse.security:def:31675
    P
    		Security update for bind (Moderate)
    2021-08-30
    oval:org.opensuse.security:def:31674
    P
    		Security update for aspell (Important)
    2021-08-25
    oval:org.opensuse.security:def:26099
    P
    		Security update for libsndfile (Critical)
    2021-08-05
    oval:org.opensuse.security:def:26100
    P
    		Security update for djvulibre (Important)
    2021-08-05
    oval:org.opensuse.security:def:31239
    P
    		Security update for dbus-1 (Important)
    2021-08-02
    oval:org.opensuse.security:def:32146
    P
    		Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)
    2021-07-21
    oval:org.opensuse.security:def:31228
    P
    		Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)
    2021-07-21
    oval:org.opensuse.security:def:31227
    P
    		Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)
    2021-07-21
    oval:org.opensuse.security:def:26086
    P
    		Security update for libsolv (Important)
    2021-06-28
    oval:org.opensuse.security:def:32129
    P
    		Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)
    2021-06-18
    oval:org.opensuse.security:def:36209
    P
    		libpng12-0-1.2.31-5.33.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36474
    P
    		libpng-devel-1.2.31-5.33.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:42616
    P
    		libpng12-0-1.2.31-5.33.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:32928
    P
    		Security update for postgresql10 (Moderate)
    2021-05-27
    oval:org.opensuse.security:def:26043
    P
    		Security update for bind (Important)
    2021-05-04
    oval:org.opensuse.security:def:26042
    P
    		Security update for cups (Important)
    2021-04-30
    oval:org.opensuse.security:def:26035
    P
    		Security update for apache-commons-io (Moderate)
    2021-04-26
    oval:org.opensuse.security:def:31150
    P
    		Security update for xorg-x11-server (Important)
    2021-04-14
    oval:org.opensuse.security:def:26028
    P
    		Security update for xorg-x11-server (Important)
    2021-04-13
    oval:org.opensuse.security:def:26024
    P
    		Security update for xen (Important)
    2021-04-06
    oval:org.opensuse.security:def:32285
    P
    		Security update for MozillaFirefox (Important)
    2021-03-31
    oval:org.opensuse.security:def:31741
    P
    		Security update for wpa_supplicant (Important)
    2021-03-09
    oval:org.opensuse.security:def:31730
    P
    		Security update for bind (Important)
    2021-02-18
    oval:org.opensuse.security:def:26193
    P
    		Security update for bind (Important)
    2021-02-18
    oval:org.opensuse.security:def:26091
    P
    		Security update for MozillaFirefox (Important)
    2021-01-29
    oval:org.opensuse.security:def:31649
    P
    		Security update for postgresql, postgresql12, postgresql13 (Important)
    2021-01-26
    oval:org.opensuse.security:def:32097
    P
    		Security update for flac (Moderate)
    2021-01-04
    oval:org.opensuse.security:def:32003
    P
    		Security update for python-cryptography (Moderate)
    2020-12-04
    oval:org.opensuse.security:def:35760
    P
    		libpng12-0-1.2.31-5.25.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:42003
    P
    		libpng12-0-1.2.31-5.12.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35964
    P
    		libpng12-0-1.2.31-5.31.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35596
    P
    		libpng12-0-1.2.31-5.12.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:26388
    P
    		Security update for irssi (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25923
    P
    		Security update for util-linux (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25311
    P
    		Security update for shim (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26600
    P
    		librpcsecgss on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26246
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25758
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:31761
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:26741
    P
    		libcap-progs on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26596
    P
    		libpng12-0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25386
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:32042
    P
    		Security update for krb5 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31942
    P
    		Security update for gnome-session (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26928
    P
    		kdelibs4 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25770
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:25489
    P
    		Security update for pam_radius (Important)
    2020-12-01
    oval:org.opensuse.security:def:32341
    P
    		Security update for spice (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26799
    P
    		pam_mount on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31065
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25799
    P
    		Security update for gcc48 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31431
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25887
    P
    		Security update for ImageMagick (Important)
    2020-12-01
    oval:org.opensuse.security:def:32429
    P
    		Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:27472
    P
    		libpng-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25147
    P
    		Security update for libqt4 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32685
    P
    		java-1_4_2-ibm on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31443
    P
    		Security update for policycoreutils (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26365
    P
    		Security update of chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:26437
    P
    		Security update for enigmail (Important)
    2020-12-01
    oval:org.opensuse.security:def:32495
    P
    		clamav on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25159
    P
    		Security update for LibVNCServer (Important)
    2020-12-01
    oval:org.opensuse.security:def:31537
    P
    		Security update for samba (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26653
    P
    		xorg-x11-Xvnc on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25515
    P
    		Security update for Mesa (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31893
    P
    		Security update for expat (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26490
    P
    		Security update for pdns (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33172
    P
    		libpng12-0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26023
    P
    		Security update for evince (Important)
    2020-12-01
    oval:org.opensuse.security:def:25351
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:31885
    P
    		Security update for ecryptfs-utils (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31818
    P
    		Security update for audiofile (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26759
    P
    		libpng12-0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25590
    P
    		Security update for dovecot22 (Important)
    2020-12-01
    oval:org.opensuse.security:def:25573
    P
    		Security update for ghostscript (Important)
    2020-12-01
    oval:org.opensuse.security:def:27172
    P
    		libadns1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25652
    P
    		Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:25826
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31884
    P
    		Security update for dosfstools (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25777
    P
    		Security update for flash-player (Critical)
    2020-12-01
    oval:org.opensuse.security:def:25879
    P
    		Security update for pidgin-otr (Important)
    2020-12-01
    oval:org.opensuse.security:def:32561
    P
    		libpng12-0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25310
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26449
    P
    		Security update for nginx (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26232
    P
    		Security update for openconnect (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32889
    P
    		kbd on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31594
    P
    		Security update for tiff (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26702
    P
    		fuse on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26561
    P
    		gstreamer-0_10-plugins-good on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25322
    P
    		Security update for tigervnc (Critical)
    2020-12-01
    oval:org.opensuse.security:def:26290
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25759
    P
    		Security update for icu (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25432
    P
    		Security update for ibus (Important)
    2020-12-01
    oval:org.opensuse.security:def:31837
    P
    		Security update for bind (Important)
    2020-12-01
    oval:org.opensuse.security:def:26755
    P
    		libnetpbm10 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31064
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25718
    P
    		Security update for java-1_7_0-openjdk (Important)
    2020-12-01
    oval:org.opensuse.security:def:31981
    P
    		Security update for java-1_7_1-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:26963
    P
    		libpng12-0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25834
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25736
    P
    		Security update for mozilla-nspr, mozilla-nss (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32390
    P
    		Security update for tomcat6 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27437
    P
    		libcap-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31076
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25856
    P
    		Security update for gd (Important)
    2020-12-01
    oval:org.opensuse.security:def:25989
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:32047
    P
    		Security update for kvm (Important)
    2020-12-01
    oval:org.opensuse.security:def:31432
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26308
    P
    		Security update for python modules (Low)
    2020-12-01
    oval:org.opensuse.security:def:32451
    P
    		Security update for xen (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25148
    P
    		Security update for cups (Important)
    2020-12-01
    oval:org.opensuse.security:def:31445
    P
    		Security update for poppler (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26335
    P
    		security update for go (Low)
    2020-12-01
    oval:org.opensuse.security:def:32724
    P
    		libpng12-0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25514
    P
    		Security update for mariadb-connector-c (Important)
    2020-12-01
    oval:org.opensuse.security:def:31517
    P
    		Security update for quagga (Important)
    2020-12-01
    oval:org.opensuse.security:def:31518
    P
    		Security update for quagga (Important)
    2020-12-01
    oval:org.opensuse.security:def:26476
    P
    		Security update for nextcloud (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33133
    P
    		ldapsmb on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25223
    P
    		Security update for openssl-1_0_0 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31798
    P
    		Security update for OpenEXR (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31779
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:26724
    P
    		kdebase3-runtime on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25526
    P
    		Security update for java-1_7_0-openjdk (Important)
    2020-12-01
    oval:org.opensuse.security:def:31985
    P
    		Security update for java-1_7_1-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:26534
    P
    		curl on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25595
    P
    		Security update for java-1_8_0-ibm (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32041
    P
    		Security update for krb5 (Important)
    2020-12-01
    oval:org.opensuse.security:def:31840
    P
    		Security update for bsdtar (Important)
    2020-12-01
    oval:org.opensuse.security:def:25962
    P
    		Security update for mariadb (Important)
    2020-12-01
    oval:org.opensuse.security:def:25724
    P
    		Security update for postgresql10 (Low)
    2020-12-01
    oval:org.opensuse.security:def:27207
    P
    		libpng12-0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25940
    P
    		Security update for mariadb (Important)
    2020-12-01
    oval:org.opensuse.security:def:25865
    P
    		Security update for pcre (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32522
    P
    		gnome-screensaver on GA media (Moderate)
    2020-12-01
    oval:org.mitre.oval:def:22592
    P
    		ELSA-2007:0356: libpng security update (Moderate)
    2014-05-26
    oval:org.mitre.oval:def:10324
    V
    		The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read.
    2013-04-29
    oval:com.redhat.rhsa:def:20070356
    P
    		RHSA-2007:0356: libpng security update (Moderate)
    2007-05-17
    BACK
    greg_roelofs libpng 1.0.6
    greg_roelofs libpng 1.0.7
    greg_roelofs libpng 1.0.8
    greg_roelofs libpng 1.0.9
    greg_roelofs libpng 1.2.0
    greg_roelofs libpng 1.2.1
    greg_roelofs libpng 1.2.2
    greg_roelofs libpng 1.2.3
    greg_roelofs libpng 1.2.4
    greg_roelofs libpng 1.2.5
    greg_roelofs libpng 1.2.6
    greg_roelofs libpng 1.2.7
    greg_roelofs libpng 1.2.7rc1
    greg_roelofs libpng 1.2.8
    greg_roelofs libpng 1.2.9
    greg_roelofs libpng 1.2.10
    greg_roelofs libpng 1.2.11
    greg_roelofs libpng 1.2.12