ID

VAR-201902-0855

CVE

CVE-2019-7317

TITLE

libpng CVE-2019-7317 Use After Free Denial of Service Vulnerability

DESCRIPTION

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. libpng is prone to a denial-of-service vulnerability. An attacker may exploit this issue to crash the affected application, resulting in a denial-of-service condition. libpng version 1.6.36 is vulnerable; other versions may also be affected. ========================================================================== Ubuntu Security Notice USN-3991-1 May 21, 2019 firefox vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.04 - Ubuntu 18.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Firefox could be made to crash or run programs as your login if it opened a malicious website. Software Description: - firefox: Mozilla Open Source web browser Details: Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, trick the user in to launching local executable binaries, obtain sensitive information, conduct cross-site scripting (XSS) attacks, or execute arbitrary code. (CVE-2019-11691, CVE-2019-11692, CVE-2019-11693, CVE-2019-11695, CVE-2019-11696, CVE-2019-11699, CVE-2019-11701, CVE-2019-7317, CVE-2019-9800, CVE-2019-9814, CVE-2019-9817, CVE-2019-9819, CVE-2019-9820, CVE-2019-9821) It was discovered that pressing certain key combinations could bypass addon installation prompt delays. If a user opened a specially crafted website, an attacker could potentially exploit this to trick them in to installing a malicious extension. (CVE-2019-11697) It was discovered that history data could be exposed via drag and drop of hyperlinks to and from bookmarks. If a user were tricked in to dragging a specially crafted hyperlink to the bookmark toolbar or sidebar, and subsequently back in to the web content area, an attacker could potentially exploit this to obtain sensitive information. (CVE-2019-11698) A type confusion bug was discovered with object groups and UnboxedObjects. (CVE-2019-9816) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: firefox 67.0+build2-0ubuntu0.19.04.1 Ubuntu 18.10: firefox 67.0+build2-0ubuntu0.18.10.1 Ubuntu 18.04 LTS: firefox 67.0+build2-0ubuntu0.18.04.1 Ubuntu 16.04 LTS: firefox 67.0+build2-0ubuntu0.16.04.1 After a standard system update you need to restart Firefox to make all the necessary changes. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: java-1.7.1-ibm security update Advisory ID: RHSA-2019:2495-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://access.redhat.com/errata/RHSA-2019:2495 Issue date: 2019-08-15 CVE Names: CVE-2019-2762 CVE-2019-2769 CVE-2019-2816 CVE-2019-7317 CVE-2019-11775 ===================================================================== 1. Summary: An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client Supplementary (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) - x86_64 Red Hat Enterprise Linux Server Supplementary (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 7) - x86_64 3. Description: IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE 7 to version 7R1 SR4-FP50. Security Fix(es): * IBM JDK: Failure to privatize a value pulled out of the loop by versioning (CVE-2019-11775) * OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762) * OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769) * OpenJDK: Missing URL format validation (Networking, 8221518) (CVE-2019-2816) * libpng: use-after-free in png_image_free in png.c (CVE-2019-7317) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of IBM Java must be restarted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1672409 - CVE-2019-7317 libpng: use-after-free in png_image_free in png.c 1730056 - CVE-2019-2769 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) 1730099 - CVE-2019-2816 OpenJDK: Missing URL format validation (Networking, 8221518) 1730415 - CVE-2019-2762 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) 1738549 - CVE-2019-11775 IBM JDK: Failure to privatize a value pulled out of the loop by versioning 6. Package List: Red Hat Enterprise Linux Client Supplementary (v. 7): x86_64: java-1.7.1-ibm-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-demo-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-devel-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-jdbc-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-plugin-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-src-1.7.1.4.50-1jpp.1.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode Supplementary (v. 7): x86_64: java-1.7.1-ibm-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-demo-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-devel-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-src-1.7.1.4.50-1jpp.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Supplementary (v. 7): ppc64: java-1.7.1-ibm-1.7.1.4.50-1jpp.1.el7.ppc64.rpm java-1.7.1-ibm-demo-1.7.1.4.50-1jpp.1.el7.ppc64.rpm java-1.7.1-ibm-devel-1.7.1.4.50-1jpp.1.el7.ppc64.rpm java-1.7.1-ibm-jdbc-1.7.1.4.50-1jpp.1.el7.ppc64.rpm java-1.7.1-ibm-src-1.7.1.4.50-1jpp.1.el7.ppc64.rpm ppc64le: java-1.7.1-ibm-1.7.1.4.50-1jpp.1.el7.ppc64le.rpm java-1.7.1-ibm-demo-1.7.1.4.50-1jpp.1.el7.ppc64le.rpm java-1.7.1-ibm-devel-1.7.1.4.50-1jpp.1.el7.ppc64le.rpm java-1.7.1-ibm-jdbc-1.7.1.4.50-1jpp.1.el7.ppc64le.rpm java-1.7.1-ibm-src-1.7.1.4.50-1jpp.1.el7.ppc64le.rpm s390x: java-1.7.1-ibm-1.7.1.4.50-1jpp.1.el7.s390x.rpm java-1.7.1-ibm-demo-1.7.1.4.50-1jpp.1.el7.s390x.rpm java-1.7.1-ibm-devel-1.7.1.4.50-1jpp.1.el7.s390x.rpm java-1.7.1-ibm-jdbc-1.7.1.4.50-1jpp.1.el7.s390x.rpm java-1.7.1-ibm-src-1.7.1.4.50-1jpp.1.el7.s390x.rpm x86_64: java-1.7.1-ibm-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-demo-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-devel-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-jdbc-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-plugin-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-src-1.7.1.4.50-1jpp.1.el7.x86_64.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 7): x86_64: java-1.7.1-ibm-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-demo-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-devel-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-jdbc-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-plugin-1.7.1.4.50-1jpp.1.el7.x86_64.rpm java-1.7.1-ibm-src-1.7.1.4.50-1jpp.1.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-2762 https://access.redhat.com/security/cve/CVE-2019-2769 https://access.redhat.com/security/cve/CVE-2019-2816 https://access.redhat.com/security/cve/CVE-2019-7317 https://access.redhat.com/security/cve/CVE-2019-11775 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXVUfj9zjgjWX9erEAQgHKg/+JGYAGvI9M07jVnyx/aVilNzoHRbbyA9k ZOdfkTRvXD3Einlrwpe0NV6UPygQ6kiLGE1YdlO3LluoLJupasBXpgCKCeSee/bN Ie1mLvXswfzOzGLIHGTeY7bSTGgjP99+7GzTrpKSbf3wl8LGAdx42EJ0ecIMUIyQ E0YpbV9h6M77ItWpeI88aIy6n74xu40kkZA3GupPQxBVfFJlkMJgwOdE4Nwi1b50 48f0UjQkxZ6bl0imx+rUoboCbgH2iohf45GmLqF0OgwDUeq0MkXYARXkqzaA7NOU ADwFxOFcj0SJ7LJXjFRQa9i+D2KKRHbXTmn/PaXnM6J6BEycsFfwLXnqVqdrTUtb RJ00k4yPMjADkmTuwdS0GNL9wa0YWtBja1By2n+S49AbA36CysmuVAAMfq5JYnHB 5F2IqlnQvu6EZl84psq692WWKZPiBzgvSVTfi0+VNPyN9Omsn85/sw2wkXMvPMJZ DAeRLKKgoWMv8bNzOAd9rvO/z6DO6fYKSygFsMN6f2vfG61KuHnD/n2uot929/G8 4vPqxTcVMvUjXjPNqZtMXJpmqV/m0OjzzfbEFzLNlHnMNvkzLiMH3MJxZ+SaL0uU Y8uI6vVttVB37hjkZAA/+cK753smTsFa+Ol54Wl8ULei4tRGdHc7hGII/9nL5OTr 7J6ryPGM2HA= =nXZW -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201908-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: libpng: Multiple vulnerabilities Date: August 03, 2019 Bugs: #683366 ID: 201908-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in libpng, the worst of which could result in a Denial of Service condition. Background ========== libpng is a standard library used to process PNG (Portable Network Graphics) images. It is used by several programs, including web browsers and potentially server processes. Please review the CVE identifiers referenced below for details. Impact ====== A remote attacker, by enticing a user to process a specially crafted PNG file, could cause a Denial of Service condition. Workaround ========== There is no known workaround at this time. Resolution ========== All libpng users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libpng-1.6.37" References ========== [ 1 ] CVE-2018-14048 https://nvd.nist.gov/vuln/detail/CVE-2018-14048 [ 2 ] CVE-2018-14550 https://nvd.nist.gov/vuln/detail/CVE-2018-14550 [ 3 ] CVE-2019-7317 https://nvd.nist.gov/vuln/detail/CVE-2019-7317 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201908-02 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2019 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5 . Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/mozilla-firefox-60.7.0esr-i686-1_slack14.2.txz: Upgraded. This release contains security fixes and improvements. Some of the patched flaws are considered critical, and could be used to run attacker code and install software, requiring no user interaction beyond normal browsing. For more information, see: https://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/ https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9815 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9816 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9817 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9818 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9819 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9820 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11691 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11692 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11693 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-7317 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9797 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2018-18511 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11694 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-11698 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-5798 https://www.mozilla.org/en-US/security/advisories/mfsa2019-14/#CVE-2019-9800 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 14.2: ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/mozilla-firefox-60.7.0esr-i686-1_slack14.2.txz Updated package for Slackware x86_64 14.2: ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/mozilla-firefox-60.7.0esr-x86_64-1_slack14.2.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/xap/mozilla-firefox-60.7.0esr-i686-1.txz Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/xap/mozilla-firefox-60.7.0esr-x86_64-1.txz MD5 signatures: +-------------+ Slackware 14.2 package: 9bb86b28639fe241a285ae8868f6fd3c mozilla-firefox-60.7.0esr-i686-1_slack14.2.txz Slackware x86_64 14.2 package: 71cfd983350a89459015e89af1f4cf46 mozilla-firefox-60.7.0esr-x86_64-1_slack14.2.txz Slackware -current package: 02f5b3d10ba9ef7a094f862b1a9b4120 xap/mozilla-firefox-60.7.0esr-i686-1.txz Slackware x86_64 -current package: b4ccd8857ce8355105c0595cf2d84154 xap/mozilla-firefox-60.7.0esr-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg mozilla-firefox-60.7.0esr-i686-1_slack14.2.txz +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security@slackware.com +------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo@slackware.com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address

AFFECTED PRODUCTS

CVSS

PROBLEMTYPE DATA

THREAT TYPE

network

TYPE

Design Error

PATCH

EXTERNAL IDS

REFERENCES

CREDITS

The vendor reported this issue.

SOURCES

LAST UPDATE DATE

2025-06-26T20:21:21.694000+00:00

SOURCES UPDATE DATE

SOURCES RELEASE DATE