Comment 10 for bug 1902993

Revision history for this message
Michel Thebeau [WIND] (mthebeau) wrote :

Reviewed: https://review.opendev.org/c/starlingx/tools/+/764496
Committed: https://review.opendev.org/plugins/gitiles/starlingx/tools/+/ca0368edc04f8e143402c22eaf7d22d622049d20
Submitter: Zuul
Branch: r/stx.4.0

commit ca0368edc04f8e143402c22eaf7d22d622049d20
Author: Michel Thebeau <email address hidden>
Date: Mon Nov 16 16:12:48 2020 -0500

    libpng: CVE-2017-12652: omits check of chunk len

    libpng does not properly check the length of chunks against the user
    limit.

    Fix is provided by Centos RPMs:
    libpng-1.5.13-8.el7.x86_64.rpm
    libpng-devel-1.5.13-8.el7.x86_64.rpm

    Test:
    Build. Deploy AIO-SX.

    Closes-Bug: 1902993
    Change-Id: Id712d5416bafe331aa4299540c693585e5e181a2
    Signed-off-by: Michel Thebeau <email address hidden>
    (cherry picked from commit 596d66bc50dc693f556e2dd99c79fcfb7306580a)