advancecomp-1.15-22.el7

AdvanceCOMP is a set of recompression utilities for .PNG, .MNG and .ZIP files.

Security Fix(es):

* advancecomp: integer overflow in png_compress in pngex.cc (CVE-2019-9210)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Asianux Server 7.8 Release Notes linked from the References section.

CVE-2019-9210
In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer that is too small. (There is also a heap-based buffer over-read.)