An update of the syslinux package has been released.

New libpng packages are available for Slackware 14.2 and -current to fix security issues.

リモートホストは、GLSA-201908-02（libpng：複数の脆弱性）で説明されている脆弱性に影響されています。複数の脆弱性がlibpngで発見されています。詳細については、以下に記載されているCVE識別番号を参照してください。影響：リモートの攻撃者が、ユーザーを誘導して特別に細工されたPNGファイルを処理させることで、サービス拒否状態が引き起こされる可能性があります。回避策：現時点では、既知の回避策はありません。

为 Slackware 14.2 和当前版本提供了用于修复安全问题的新 libpng 程序包。

遠端主機受到 GLSA-201908-02 中所述的弱點影響 (libpng：多個弱點) 在 libpng 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。影響：誘騙使用者處理特製 PNG 檔案的遠端攻擊者可能會造成拒絕服務情況。因應措施：目前尚無已知的因應措施。

セキュリティ問題を修正する新しいlibpngパッケージが、Slackware 14.2およびcurrentで利用可能です。

远程主机受到 GLSA-201908-02 中所述漏洞的影响（libpng：多个漏洞）在 libpng 中发现多个漏洞。请检查下面供参考的 CVE 标识符以了解详细信息。影响：诱骗用户处理特制 PNG 文件的远程攻击者可能会造成拒绝服务情况。解决方法：目前无任何已知的解决方法。

現已提供適用於 Slackware 14.2 和最新版本的新 libpng 套件，可修正多個安全性問題。

The remote host is affected by the vulnerability described in GLSA-201908-02 (libpng: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libpng. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, by enticing a user to process a specially crafted PNG       file, could cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

According to the version of the libpng package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - An issue has been found in third-party PNM decoding     associated with libpng 1.6.35. It is a stack-based     buffer overflow in the function get_token in pnm2png.c     in pnm2png.(CVE-2018-14550)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - An issue has been found in third-party PNM decoding     associated with libpng 1.6.35. It is a stack-based     buffer overflow in the function get_token in pnm2png.c     in pnm2png.(CVE-2018-14550)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
204258	Photon OS 5.0: Syslinux PHSA-2023-5.0-0033	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	critical
124140	Slackware 14.2 / current : libpng (SSA:2019-107-01)	Nessus	Slackware Local Security Checks	2019/4/18	2024/6/3	high
127560	GLSA-201908-02：libpng：複数の脆弱性	Nessus	Gentoo Local Security Checks	2019/8/12	2024/5/7	high
124140	Slackware 14.2 / 最新：libpng (SSA:2019-107-01)	Nessus	Slackware Local Security Checks	2019/4/18	2024/6/3	high
127560	GLSA-201908-02：libpng：多個弱點	Nessus	Gentoo Local Security Checks	2019/8/12	2024/5/7	high
124140	Slackware 14.2/current：libpng（SSA：2019-107-01）	Nessus	Slackware Local Security Checks	2019/4/18	2024/6/3	high
127560	GLSA-201908-02：libpng：多个漏洞	Nessus	Gentoo Local Security Checks	2019/8/12	2024/5/7	high
124140	Slackware 14.2 / 最新：libpng (SSA:2019-107-01)	Nessus	Slackware Local Security Checks	2019/4/18	2024/6/3	high
127560	GLSA-201908-02 : libpng: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2019/8/12	2024/5/7	high
203638	Photon OS 4.0: Syslinux PHSA-2023-4.0-0415	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/23	critical
132832	EulerOS Virtualization for ARM 64 3.0.5.0 : libpng (EulerOS-SA-2020-1078)	Nessus	Huawei Local Security Checks	2020/1/13	2024/4/1	high
132608	EulerOS 2.0 SP8 : libpng (EulerOS-SA-2020-1015)	Nessus	Huawei Local Security Checks	2020/1/2	2024/4/1	high
204103	Photon OS 3.0: Syslinux PHSA-2023-3.0-0602	Nessus	PhotonOS Local Security Checks	2024/7/24	2024/7/24	critical

検出

プラグインの検索

critical

high

high

high

high

high

high

high

high

critical

high

high

critical