Advisory ROSA-SA-2024-2328

Software: libpng 1.6.34
OS: ROSA Virtualization 2.1

package_evr_string: libpng-1.6.34-5.0.1.rv3.src.rpm

CVE-ID: CVE-2019-7317
BDU-ID: 2019-03330
CVE-Crit: MEDIUM
CVE-DESC.: A vulnerability in the png_image_free function (png.c) of the PNG libpng bitmap graphics library involves the png_image_free_function destructor accessing a freed data area. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service
CVE-STATUS: Resolved
CVE-REV: To close, run the yum update libpng command