CVE:CVE-2015-7981
CNNVD:CNNVD-201511-055
libpng是一个可对PNG图形文件实现创建、读写等操作的PNG参考库。
libpng的png.c文件中的‘png_convert_to_rfc1123’函数存在安全漏洞。远程攻击者可借助图像数据中特制的tIME数据块利用该漏洞获取敏感的进程内存信息。以下版本受到影响：libpng 1.0.64之前1.0.x版本，1.2.54之前1.2.x版本，1.4.17之前1.4.x版本。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,15.10,and avoid the version 12.04,14.04,15.04,15.10; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade redhat enterprise_linux_hpc_node_eus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.2,and avoid the version 7.2; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.2,6.7.z,and avoid the version 7.2,6.7.z; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,6.0,and avoid the version 7.0,6.0; Upgrade libpng libpng to a higher version than 1.0.0,1.0.1,1.0.2,1.0.3,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.0.13,1.0.14,1.0.15,1.0.16,1.0.17,1.0.18,1.0.19,1.0.20,1.0.21,1.0.22,1.0.23,1.0.24,1.0.25,1.0.26,1.0.27,1.0.28,1.0.29,1.0.30,1.0.31,1.0.32,1.0.33,1.0.34,1.0.35,1.0.37,1.0.38,1.0.39,1.0.40,1.0.41,1.0.42,1.0.43,1.0.44,1.0.45,1.0.46,1.0.47,1.0.48,1.0.50,1.0.51,1.0.52,1.0.53,1.0.54,1.0.55,1.0.55:rc01,1.0.56,1.0.56:devel,1.0.57,1.0.57:rc01,1.0.58,1.0.59,1.0.60,1.0.61,1.0.62,1.0.63,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,1.2.11,1.2.12,1.2.13,1.2.14,1.2.15,1.2.16,1.2.17,1.2.18,1.2.19,1.2.20,1.2.21,1.2.22,1.2.23,1.2.24,1.2.25,1.2.26,1.2.27,1.2.28,1.2.29,1.2.30,1.2.31,1.2.32,1.2.33,1.2.34,1.2.35,1.2.36,1.2.37,1.2.38,1.2.39,1.2.40,1.2.41,1.2.42,1.2.43,1.2.43:devel,1.2.44,1.2.45,1.2.45:devel,1.2.46,1.2.46:devel,1.2.47,1.2.47:beta,1.2.48,1.2.48:betas,1.2.49,1.2.50,1.2.51,1.2.52,1.2.53,1.4.0,1.4.1,1.4.2,1.4.3,1.4.4,1.4.5,1.4.6,1.4.7,1.4.8,1.4.9,1.4.10,1.4.11,1.4.12,1.4.13,1.4.14,1.4.15,1.4.16,and avoid the version 1.0.0,1.0.1,1.0.2,1.0.3,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.10,1.0.11,1.0.12,1.0.13,1.0.14,1.0.15,1.0.16,1.0.17,1.0.18,1.0.19,1.0.20,1.0.21,1.0.22,1.0.23,1.0.24,1.0.25,1.0.26,1.0.27,1.0.28,1.0.29,1.0.30,1.0.31,1.0.32,1.0.33,1.0.34,1.0.35,1.0.37,1.0.38,1.0.39,1.0.40,1.0.41,1.0.42,1.0.43,1.0.44,1.0.45,1.0.46,1.0.47,1.0.48,1.0.50,1.0.51,1.0.52,1.0.53,1.0.54,1.0.55,1.0.55:rc01,1.0.56,1.0.56:devel,1.0.57,1.0.57:rc01,1.0.58,1.0.59,1.0.60,1.0.61,1.0.62,1.0.63,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,1.2.9,1.2.10,1.2.11,1.2.12,1.2.13,1.2.14,1.2.15,1.2.16,1.2.17,1.2.18,1.2.19,1.2.20,1.2.21,1.2.22,1.2.23,1.2.24,1.2.25,1.2.26,1.2.27,1.2.28,1.2.29,1.2.30,1.2.31,1.2.32,1.2.33,1.2.34,1.2.35,1.2.36,1.2.37,1.2.38,1.2.39,1.2.40,1.2.41,1.2.42,1.2.43,1.2.43:devel,1.2.44,1.2.45,1.2.45:devel,1.2.46,1.2.46:devel,1.2.47,1.2.47:beta,1.2.48,1.2.48:betas,1.2.49,1.2.50,1.2.51,1.2.52,1.2.53,1.4.0,1.4.1,1.4.2,1.4.3,1.4.4,1.4.5,1.4.6,1.4.7,1.4.8,1.4.9,1.4.10,1.4.11,1.4.12,1.4.13,1.4.14,1.4.15,1.4.16