OPENSUSE-SU-2024:10184-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
libpng12-0-1.2.56-1.5 on GA media
Severity
Moderate
Notes
Title of the patch: libpng12-0-1.2.56-1.5 on GA media
Description of the patch: These are all security issues fixed in the libpng12-0-1.2.56-1.5 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-10184
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
9.8 (Critical)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
6.5 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
8.8 (High)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
References
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "libpng12-0-1.2.56-1.5 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the libpng12-0-1.2.56-1.5 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10184",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10184-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2010-1205 page",
"url": "https://www.suse.com/security/cve/CVE-2010-1205/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-2501 page",
"url": "https://www.suse.com/security/cve/CVE-2011-2501/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3026 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3026/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3045 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3045/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-3048 page",
"url": "https://www.suse.com/security/cve/CVE-2011-3048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-3386 page",
"url": "https://www.suse.com/security/cve/CVE-2012-3386/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-7353 page",
"url": "https://www.suse.com/security/cve/CVE-2013-7353/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-7354 page",
"url": "https://www.suse.com/security/cve/CVE-2013-7354/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9495 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9495/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-0973 page",
"url": "https://www.suse.com/security/cve/CVE-2015-0973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8126 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8540 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8540/"
}
],
"title": "libpng12-0-1.2.56-1.5 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10184-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libpng12-0-1.2.56-1.5.aarch64",
"product": {
"name": "libpng12-0-1.2.56-1.5.aarch64",
"product_id": "libpng12-0-1.2.56-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "libpng12-0-32bit-1.2.56-1.5.aarch64",
"product": {
"name": "libpng12-0-32bit-1.2.56-1.5.aarch64",
"product_id": "libpng12-0-32bit-1.2.56-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "libpng12-compat-devel-1.2.56-1.5.aarch64",
"product": {
"name": "libpng12-compat-devel-1.2.56-1.5.aarch64",
"product_id": "libpng12-compat-devel-1.2.56-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"product": {
"name": "libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"product_id": "libpng12-compat-devel-32bit-1.2.56-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "libpng12-devel-1.2.56-1.5.aarch64",
"product": {
"name": "libpng12-devel-1.2.56-1.5.aarch64",
"product_id": "libpng12-devel-1.2.56-1.5.aarch64"
}
},
{
"category": "product_version",
"name": "libpng12-devel-32bit-1.2.56-1.5.aarch64",
"product": {
"name": "libpng12-devel-32bit-1.2.56-1.5.aarch64",
"product_id": "libpng12-devel-32bit-1.2.56-1.5.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng12-0-1.2.56-1.5.ppc64le",
"product": {
"name": "libpng12-0-1.2.56-1.5.ppc64le",
"product_id": "libpng12-0-1.2.56-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng12-0-32bit-1.2.56-1.5.ppc64le",
"product": {
"name": "libpng12-0-32bit-1.2.56-1.5.ppc64le",
"product_id": "libpng12-0-32bit-1.2.56-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng12-compat-devel-1.2.56-1.5.ppc64le",
"product": {
"name": "libpng12-compat-devel-1.2.56-1.5.ppc64le",
"product_id": "libpng12-compat-devel-1.2.56-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"product": {
"name": "libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"product_id": "libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng12-devel-1.2.56-1.5.ppc64le",
"product": {
"name": "libpng12-devel-1.2.56-1.5.ppc64le",
"product_id": "libpng12-devel-1.2.56-1.5.ppc64le"
}
},
{
"category": "product_version",
"name": "libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"product": {
"name": "libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"product_id": "libpng12-devel-32bit-1.2.56-1.5.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng12-0-1.2.56-1.5.s390x",
"product": {
"name": "libpng12-0-1.2.56-1.5.s390x",
"product_id": "libpng12-0-1.2.56-1.5.s390x"
}
},
{
"category": "product_version",
"name": "libpng12-0-32bit-1.2.56-1.5.s390x",
"product": {
"name": "libpng12-0-32bit-1.2.56-1.5.s390x",
"product_id": "libpng12-0-32bit-1.2.56-1.5.s390x"
}
},
{
"category": "product_version",
"name": "libpng12-compat-devel-1.2.56-1.5.s390x",
"product": {
"name": "libpng12-compat-devel-1.2.56-1.5.s390x",
"product_id": "libpng12-compat-devel-1.2.56-1.5.s390x"
}
},
{
"category": "product_version",
"name": "libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"product": {
"name": "libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"product_id": "libpng12-compat-devel-32bit-1.2.56-1.5.s390x"
}
},
{
"category": "product_version",
"name": "libpng12-devel-1.2.56-1.5.s390x",
"product": {
"name": "libpng12-devel-1.2.56-1.5.s390x",
"product_id": "libpng12-devel-1.2.56-1.5.s390x"
}
},
{
"category": "product_version",
"name": "libpng12-devel-32bit-1.2.56-1.5.s390x",
"product": {
"name": "libpng12-devel-32bit-1.2.56-1.5.s390x",
"product_id": "libpng12-devel-32bit-1.2.56-1.5.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libpng12-0-1.2.56-1.5.x86_64",
"product": {
"name": "libpng12-0-1.2.56-1.5.x86_64",
"product_id": "libpng12-0-1.2.56-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "libpng12-0-32bit-1.2.56-1.5.x86_64",
"product": {
"name": "libpng12-0-32bit-1.2.56-1.5.x86_64",
"product_id": "libpng12-0-32bit-1.2.56-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "libpng12-compat-devel-1.2.56-1.5.x86_64",
"product": {
"name": "libpng12-compat-devel-1.2.56-1.5.x86_64",
"product_id": "libpng12-compat-devel-1.2.56-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"product": {
"name": "libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"product_id": "libpng12-compat-devel-32bit-1.2.56-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "libpng12-devel-1.2.56-1.5.x86_64",
"product": {
"name": "libpng12-devel-1.2.56-1.5.x86_64",
"product_id": "libpng12-devel-1.2.56-1.5.x86_64"
}
},
{
"category": "product_version",
"name": "libpng12-devel-32bit-1.2.56-1.5.x86_64",
"product": {
"name": "libpng12-devel-32bit-1.2.56-1.5.x86_64",
"product_id": "libpng12-devel-32bit-1.2.56-1.5.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-0-1.2.56-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64"
},
"product_reference": "libpng12-0-1.2.56-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-0-1.2.56-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le"
},
"product_reference": "libpng12-0-1.2.56-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-0-1.2.56-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x"
},
"product_reference": "libpng12-0-1.2.56-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-0-1.2.56-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64"
},
"product_reference": "libpng12-0-1.2.56-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-0-32bit-1.2.56-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64"
},
"product_reference": "libpng12-0-32bit-1.2.56-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-0-32bit-1.2.56-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le"
},
"product_reference": "libpng12-0-32bit-1.2.56-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-0-32bit-1.2.56-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x"
},
"product_reference": "libpng12-0-32bit-1.2.56-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-0-32bit-1.2.56-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64"
},
"product_reference": "libpng12-0-32bit-1.2.56-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-compat-devel-1.2.56-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64"
},
"product_reference": "libpng12-compat-devel-1.2.56-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-compat-devel-1.2.56-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le"
},
"product_reference": "libpng12-compat-devel-1.2.56-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-compat-devel-1.2.56-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x"
},
"product_reference": "libpng12-compat-devel-1.2.56-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-compat-devel-1.2.56-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64"
},
"product_reference": "libpng12-compat-devel-1.2.56-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-compat-devel-32bit-1.2.56-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64"
},
"product_reference": "libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le"
},
"product_reference": "libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-compat-devel-32bit-1.2.56-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x"
},
"product_reference": "libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-compat-devel-32bit-1.2.56-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64"
},
"product_reference": "libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-devel-1.2.56-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64"
},
"product_reference": "libpng12-devel-1.2.56-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-devel-1.2.56-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le"
},
"product_reference": "libpng12-devel-1.2.56-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-devel-1.2.56-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x"
},
"product_reference": "libpng12-devel-1.2.56-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-devel-1.2.56-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64"
},
"product_reference": "libpng12-devel-1.2.56-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-devel-32bit-1.2.56-1.5.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64"
},
"product_reference": "libpng12-devel-32bit-1.2.56-1.5.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-devel-32bit-1.2.56-1.5.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le"
},
"product_reference": "libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-devel-32bit-1.2.56-1.5.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x"
},
"product_reference": "libpng12-devel-32bit-1.2.56-1.5.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpng12-devel-32bit-1.2.56-1.5.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
},
"product_reference": "libpng12-devel-32bit-1.2.56-1.5.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2010-1205",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2010-1205"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2010-1205",
"url": "https://www.suse.com/security/cve/CVE-2010-1205"
},
{
"category": "external",
"summary": "SUSE Bug 1188284 for CVE-2010-1205",
"url": "https://bugzilla.suse.com/1188284"
},
{
"category": "external",
"summary": "SUSE Bug 617866 for CVE-2010-1205",
"url": "https://bugzilla.suse.com/617866"
},
{
"category": "external",
"summary": "SUSE Bug 622506 for CVE-2010-1205",
"url": "https://bugzilla.suse.com/622506"
},
{
"category": "external",
"summary": "SUSE Bug 639941 for CVE-2010-1205",
"url": "https://bugzilla.suse.com/639941"
},
{
"category": "external",
"summary": "SUSE Bug 854395 for CVE-2010-1205",
"url": "https://bugzilla.suse.com/854395"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2010-1205"
},
{
"cve": "CVE-2011-2501",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-2501"
}
],
"notes": [
{
"category": "general",
"text": "The png_format_buffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service (application crash) via a crafted PNG image that triggers an out-of-bounds read during the copying of error-message data. NOTE: this vulnerability exists because of a CVE-2004-0421 regression. NOTE: this is called an off-by-one error by some sources.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-2501",
"url": "https://www.suse.com/security/cve/CVE-2011-2501"
},
{
"category": "external",
"summary": "SUSE Bug 702578 for CVE-2011-2501",
"url": "https://bugzilla.suse.com/702578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-2501"
},
{
"cve": "CVE-2011-3026",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3026"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3026",
"url": "https://www.suse.com/security/cve/CVE-2011-3026"
},
{
"category": "external",
"summary": "SUSE Bug 747311 for CVE-2011-3026",
"url": "https://bugzilla.suse.com/747311"
},
{
"category": "external",
"summary": "SUSE Bug 747327 for CVE-2011-3026",
"url": "https://bugzilla.suse.com/747327"
},
{
"category": "external",
"summary": "SUSE Bug 747328 for CVE-2011-3026",
"url": "https://bugzilla.suse.com/747328"
},
{
"category": "external",
"summary": "SUSE Bug 773612 for CVE-2011-3026",
"url": "https://bugzilla.suse.com/773612"
},
{
"category": "external",
"summary": "SUSE Bug 854395 for CVE-2011-3026",
"url": "https://bugzilla.suse.com/854395"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3026"
},
{
"cve": "CVE-2011-3045",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3045"
}
],
"notes": [
{
"category": "general",
"text": "Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3045",
"url": "https://www.suse.com/security/cve/CVE-2011-3045"
},
{
"category": "external",
"summary": "SUSE Bug 752008 for CVE-2011-3045",
"url": "https://bugzilla.suse.com/752008"
},
{
"category": "external",
"summary": "SUSE Bug 754456 for CVE-2011-3045",
"url": "https://bugzilla.suse.com/754456"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-3045"
},
{
"cve": "CVE-2011-3048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-3048"
}
],
"notes": [
{
"category": "general",
"text": "The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-3048",
"url": "https://www.suse.com/security/cve/CVE-2011-3048"
},
{
"category": "external",
"summary": "SUSE Bug 754745 for CVE-2011-3048",
"url": "https://bugzilla.suse.com/754745"
},
{
"category": "external",
"summary": "SUSE Bug 854395 for CVE-2011-3048",
"url": "https://bugzilla.suse.com/854395"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2011-3048"
},
{
"cve": "CVE-2012-3386",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-3386"
}
],
"notes": [
{
"category": "general",
"text": "The \"make distcheck\" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-3386",
"url": "https://www.suse.com/security/cve/CVE-2012-3386"
},
{
"category": "external",
"summary": "SUSE Bug 770618 for CVE-2012-3386",
"url": "https://bugzilla.suse.com/770618"
},
{
"category": "external",
"summary": "SUSE Bug 786745 for CVE-2012-3386",
"url": "https://bugzilla.suse.com/786745"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-3386"
},
{
"cve": "CVE-2013-7353",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-7353"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the png_set_unknown_chunks function in libpng/pngset.c in libpng before 1.5.14beta08 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a crafted image, which triggers a heap-based buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-7353",
"url": "https://www.suse.com/security/cve/CVE-2013-7353"
},
{
"category": "external",
"summary": "SUSE Bug 873124 for CVE-2013-7353",
"url": "https://bugzilla.suse.com/873124"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-7353"
},
{
"cve": "CVE-2013-7354",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-7354"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service (crash) via a crafted image to the (1) png_set_sPLT or (2) png_set_text_2 function, which triggers a heap-based buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-7354",
"url": "https://www.suse.com/security/cve/CVE-2013-7354"
},
{
"category": "external",
"summary": "SUSE Bug 873123 for CVE-2013-7354",
"url": "https://bugzilla.suse.com/873123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-7354"
},
{
"cve": "CVE-2014-9495",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9495"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the png_combine_row function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-dependent attackers to execute arbitrary code via a \"very wide interlaced\" PNG image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9495",
"url": "https://www.suse.com/security/cve/CVE-2014-9495"
},
{
"category": "external",
"summary": "SUSE Bug 912076 for CVE-2014-9495",
"url": "https://bugzilla.suse.com/912076"
},
{
"category": "external",
"summary": "SUSE Bug 912929 for CVE-2014-9495",
"url": "https://bugzilla.suse.com/912929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2014-9495"
},
{
"cve": "CVE-2015-0973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-0973"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-0973",
"url": "https://www.suse.com/security/cve/CVE-2015-0973"
},
{
"category": "external",
"summary": "SUSE Bug 912929 for CVE-2015-0973",
"url": "https://bugzilla.suse.com/912929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-0973"
},
{
"cve": "CVE-2015-8126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8126"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8126",
"url": "https://www.suse.com/security/cve/CVE-2015-8126"
},
{
"category": "external",
"summary": "SUSE Bug 954980 for CVE-2015-8126",
"url": "https://bugzilla.suse.com/954980"
},
{
"category": "external",
"summary": "SUSE Bug 958198 for CVE-2015-8126",
"url": "https://bugzilla.suse.com/958198"
},
{
"category": "external",
"summary": "SUSE Bug 960402 for CVE-2015-8126",
"url": "https://bugzilla.suse.com/960402"
},
{
"category": "external",
"summary": "SUSE Bug 962743 for CVE-2015-8126",
"url": "https://bugzilla.suse.com/962743"
},
{
"category": "external",
"summary": "SUSE Bug 963937 for CVE-2015-8126",
"url": "https://bugzilla.suse.com/963937"
},
{
"category": "external",
"summary": "SUSE Bug 969333 for CVE-2015-8126",
"url": "https://bugzilla.suse.com/969333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8126"
},
{
"cve": "CVE-2015-8540",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8540"
}
],
"notes": [
{
"category": "general",
"text": "Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a keyword in a PNG image, which triggers an out-of-bounds read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8540",
"url": "https://www.suse.com/security/cve/CVE-2015-8540"
},
{
"category": "external",
"summary": "SUSE Bug 1149680 for CVE-2015-8540",
"url": "https://bugzilla.suse.com/1149680"
},
{
"category": "external",
"summary": "SUSE Bug 958791 for CVE-2015-8540",
"url": "https://bugzilla.suse.com/958791"
},
{
"category": "external",
"summary": "SUSE Bug 963937 for CVE-2015-8540",
"url": "https://bugzilla.suse.com/963937"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-0-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-compat-devel-32bit-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-1.2.56-1.5.x86_64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.aarch64",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.ppc64le",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.s390x",
"openSUSE Tumbleweed:libpng12-devel-32bit-1.2.56-1.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-8540"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…