advisories/24353.adv

type: security
subject: Updated libpng packages fix security vulnerability
CVE:
 - CVE-2019-7317
src:
  6:
   core:
     - libpng-1.6.35-1.1.mga6
description: |
  png_image_free in png.c in libpng 1.6.0 up to 1.6.36 had a use-after-free
  because png_image_free_function is called under png_safe_execute
  (CVE-2019-7317).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=24353
 - https://github.com/glennrp/libpng/issues/275
ID: MGASA-2019-0126
1	type: security
2	subject: Updated libpng packages fix security vulnerability
3	CVE:
4	- CVE-2019-7317
5	src:
6	6:
7	core:
8	- libpng-1.6.35-1.1.mga6
9	description: \|
10	png_image_free in png.c in libpng 1.6.0 up to 1.6.36 had a use-after-free
11	because png_image_free_function is called under png_safe_execute
12	(CVE-2019-7317).
13	references:
14	- https://bugs.mageia.org/show_bug.cgi?id=24353
15	- https://github.com/glennrp/libpng/issues/275
16	ID: MGASA-2019-0126