CVE-2019-17371

Published: 09 October 2019

gif2png 2.5.13 has a memory leak in the writefile function.

Priority

CVSS 3 base score: 6.5

Status

Package	Release	Status
libpng Launchpad, Ubuntu, Debian	Upstream	Needs triage

	Ubuntu 20.10 (Groovy Gorilla)	Does not exist
	Ubuntu 20.04 LTS (Focal Fossa)	Does not exist
	Ubuntu 18.04 LTS (Bionic Beaver)	Does not exist
	Ubuntu 16.04 LTS (Xenial Xerus)	Needs triage
	Ubuntu 14.04 ESM (Trusty Tahr)	Needs triage
libpng1.6 Launchpad, Ubuntu, Debian	Upstream	Needs triage

	Ubuntu 20.10 (Groovy Gorilla)	Needs triage
	Ubuntu 20.04 LTS (Focal Fossa)	Needs triage
	Ubuntu 18.04 LTS (Bionic Beaver)	Needs triage
	Ubuntu 16.04 LTS (Xenial Xerus)	Needs triage
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist

Author	Note
mdeslaur	bug is in gif2png, not libpng

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.