You are here
Home > Preporuke > Sigurnosni nedostaci programskog paketa advancecomp

Sigurnosni nedostaci programskog paketa advancecomp

  • Detalji os-a: WN7
  • Važnost: INF
  • Operativni sustavi: L
  • Kategorije: LFE

Fedora Update Notification
2019-06-19 22:44:22.998175

Name : advancecomp
Product : Fedora 30
Version : 2.1
Release : 11.fc30
Summary : Recompression utilities for png, mng, zip and gz files
Description :
AdvanceCOMP is a set of recompression utilities for .PNG, .MNG and .ZIP files.
The main features are :
* Recompress ZIP, PNG and MNG files using the Deflate 7-Zip implementation.
* Recompress MNG files using Delta and Move optimization.

This package contains:
* advzip – Recompression and test utility for zip files
* advpng – Recompression utility for png files
* advmng – Recompression utility for mng files
* advdef – Recompression utility for deflate streams in png, mng and gz files

Update Information:

Security fix for CVE-2019-8383, CVE-2019-8379

* Fri May 10 2019 Than Ngo <> – 2.1-11
– Backport for #1708563, CVE-2019-8383 – denial of service in function adv_png_unfilter_8

[ 1 ] Bug #1708564 – CVE-2019-8383 advancecomp: denial of service in function adv_png_unfilter_8 in lib/png.c [fedora-all]
[ 2 ] Bug #1708562 – CVE-2019-8379 advancecomp: null pointer dereference in function be_uint32_read() in endianrw.h [fedora-all]

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2019-b30b48200c’ at the command
line. For more information, refer to the dnf documentation available at

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
package-announce mailing list —
To unsubscribe send an email to
Fedora Code of Conduct:
List Guidelines:
List Archives:

AutorToni Vugdelija
Cert idNCERT-REF-2019-06-0001-ADV
More in Preporuke
Sigurnosni nedostatak programskog paketa freeradius

Otkriven je sigurnosni nedostatak u programskom paketu freeradius za operacijski sustav Fedora. Otkriveni nedostatak potencijalnim napadačima omogućuje stjecanje uvećanih ovlasti....