StackRadar

CVE-2019-7317

Medium

Advisory

Published 4 Feb 2019In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.094
95th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
95
of 17,781 indexed, latest versions
Container images
79
deployed by those charts
Fix available
5 of 5
affected packages

libpng1.6 - security update

Carried by container images the latest versions of 95 of 17,781 indexed charts deploy, on 79 images.

Affected packageAffected versionsFixed inImages
libpng1.6deb1.6.28-1, 1.6.34-1ubuntu0.18.04.11.6.28-1+deb9u1, 1.6.34-1ubuntu0.18.04.240
libpngapk1.6.29-r1, 1.6.34-r1, 1.6.35-r01.6.37-r030
openjdk-8deb8u151-b12-0ubuntu0.16.04.2, 8u171-b11-0ubuntu0.16.04.1, 8u191-b12-2ubuntu0.16.04.1, 8u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~16.04.1, 8u222-b10-1ubuntu1~18.04.18
firefoxdeb57.0.4+build1-0ubuntu0.16.04.167.0+build2-0ubuntu0.16.04.11
openjdk-ltsdeb11.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.31
OSV records
ALPINE-CVE-2019-7317UBUNTU-CVE-2019-7317DSA-4435-1
Also known as
USN-3962-1, USN-3991-1, USN-4080-1, USN-4083-1, USN-8639-1

Charts affected

95 by stars
ChartLatestAffected imagesRadar Score
h2-databasecnieg1.0.31 of 1See more

h2-database cnieg 1.0.3

1 of the 1 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
oscarfonts/h2:alpinef45075ef301f
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

712
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
conduction/cgrc-nginx:devd8e23f10e882
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
conduction/conduction-ui-nginx:devd9b38e234de9
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

12,907
consentbbconsentbbVerified publisher2023.12.41 of 5See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
igrantio/bb-consent-admin-dashboard:2023.11.6852574120a1e
libpng@1.6.35-r0
1.6.37-r0

Open the chart page →

3,181
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
conduction/betaalservice-nginx:latestd3577ddd5c67
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
conduction/contactmoment-component-nginx:dev353dc46303ac
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

8,408
cp-helm-chartscp-helm-charts0.6.11 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

1 of the 8 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
solsson/kafka-prometheus-jmx-exporterdigest-pinned6f82e2b0464f
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

58,857
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

3,871
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
libpng1.6@1.6.34-1ubuntu0.18.04.1
1.6.34-1ubuntu0.18.04.2

Open the chart page →

22,405
prometheus-aws-costs-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-aws-costs-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

3,553
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
conduction/docparser-nginx:dev08524d8327b8
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

8,408
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

20,205
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

5,639
my-chartfleet-web-app0.1.04 of 6See more

my-chart fleet-web-app 0.1.0

4 of the 6 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
libpng@1.6.29-r1
1.6.37-r0
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
libpng1.6@1.6.28-1
1.6.28-1+deb9u1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
libpng1.6@1.6.28-1
1.6.28-1+deb9u1
richardchesterwood/k8s-fleetman-webapp-angular:release2ed7d720878ac
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

24,296
hdfsgradiant-bigdataVerified publisher0.1.101 of 2See more

hdfs gradiant-bigdata 0.1.10

1 of the 2 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

7,073
hivegradiant-bigdataVerified publisher0.1.61 of 5See more

hive gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

20,837
opentsdbgradiant-bigdataVerified publisher0.1.72 of 6See more

opentsdb gradiant-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
libpng@1.6.34-r1
1.6.37-r0
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

17,511
springboothelmcharts1.0.01 of 1See more

springboot helmcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
kimb88/hello-world-spring-boot:latest0639155241cb
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

6,451
cachethelm-charts-nr1.3.51 of 2See more

cachet helm-charts-nr 1.3.5

1 of the 2 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

1,896
prometheus-aws-costs-exporterhelm-charts-nr0.1.51 of 1See more

prometheus-aws-costs-exporter helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

3,553
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

10,682
kvkkvkservice0.1.01 of 4See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
conduction/kvk-nginx:devcf163d2b95b5
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

8,534
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
library/elasticsearch:2.4.641ed3a1a16b6
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

4,911
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
ncsapolyglot/converters-avconv:latestc44b22eb58bb
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

55,726
my-app-chartnginx-chart0.1.01 of 1See more

my-app-chart nginx-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
library/nginx:1.14.2f7988fb6c02e
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

761
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
openjdk-8@8u212-b03-0ubuntu1.18.04.1
openjdk-lts@11.0.3+7-1ubuntu2~18.04.1
8u222-b10-1ubuntu1~18.04.1
11.0.4+11-1ubuntu2~18.04.3

Open the chart page →

63,223
mcord-cdn-monitoringopencord0.1.01 of 3See more

mcord-cdn-monitoring opencord 0.1.0

1 of the 3 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
grafana/grafana:5.2.2b5591419cfa3
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

1,542
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
library/cassandra:2.1.20cb079c0d7a57
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

40,715
ves-agentopencord1.0.21 of 1See more

ves-agent opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
opencord/ves-agent:1.0.04187e2a8c918
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

6,350
jmxproxypndaproject0.1.01 of 1See more

jmxproxy pndaproject 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
gradiant/jmxproxy:3.4.045eceb1bc55c
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

4,177
oauth2-proxypresto-loadbalancer4.3.181 of 2See more

oauth2-proxy presto-loadbalancer 4.3.18

1 of the 2 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
library/nginx:1.15.9-alpine55390addbb1a
libpng@1.6.35-r0
1.6.37-r0

Open the chart page →

3,958
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
conduction/pan-nginx:devaf3e9f551ad1
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

8,725
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
solsson/kafka-prometheus-jmx-exporterdigest-pinned6f82e2b0464f
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

5,269
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
libpng@1.6.35-r0
1.6.37-r0

Open the chart page →

8,098
cachetsergiotocaliniVerified publisher1.0.01 of 1See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

1,896
umsappstacksimplifyVerified publisher1.0.01 of 3See more

umsapp stacksimplify 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

6,101
cerebrostakaterVerified publisher0.5.11 of 2See more

cerebro stakater 0.5.1

1 of the 2 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
lmenezes/cerebro:0.8.13e860068e403
libpng@1.6.35-r0
1.6.37-r0

Open the chart page →

2,956
grafanastakaterVerified publisher1.0.391 of 3See more

grafana stakater 1.0.39

1 of the 3 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
grafana/grafana:5.2.1104f434d47c8
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

1,355
logrotatestakaterVerified publisher1.0.191 of 1See more

logrotate stakater 1.0.19

1 of the 1 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
stakater/logrotate:3.13.05c0e01c23993
libpng@1.6.34-r1
1.6.37-r0

Open the chart page →

1,011
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

11,841
pachydermstatcan0.5.11 of 4See more

pachyderm statcan 0.5.1

1 of the 4 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
pachyderm/dash:1.9.094e9a281e5a4
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

4,967
democharttech-challenge0.1.01 of 4See more

demochart tech-challenge 0.1.0

1 of the 4 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
grafana/grafana:5.1.0a6b37f9afdd9
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

3,632
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

21,005
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2019-7317.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
libpng1.6@1.6.28-1
1.6.28-1+deb9u1

Open the chart page →

22,665

Container images carrying it

79 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
metabase/metabase:v0.31.2ffb2dccacefc
libpng@1.6.34-r1
1.6.37-r0
1
ncsapolyglot/converters-avconv:latestc44b22eb58bb
libpng1.6@1.6.28-1
1.6.28-1+deb9u1
1
neilpeterson/aks-helloworld:v1fb47732ef36b
libpng1.6@1.6.28-1
1.6.28-1+deb9u1
1
neilpeterson/chart-tweet:latest64fd8dab075f
libpng1.6@1.6.28-1
1.6.28-1+deb9u1
1
neilpeterson/process-tweet:latest39ce9f92e899
libpng1.6@1.6.28-1
1.6.28-1+deb9u1
1
nodered/node-red-docker:0.19.6-v8070643219ea2
libpng1.6@1.6.28-1
1.6.28-1+deb9u1
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
openjdk-8@8u212-b03-0ubuntu1.18.04.1
openjdk-lts@11.0.3+7-1ubuntu2~18.04.1
8u222-b10-1ubuntu1~18.04.1
11.0.4+11-1ubuntu2~18.04.3
1
opencord/ves-agent:1.0.04187e2a8c918
libpng@1.6.34-r1
1.6.37-r0
1
opendatacube/pipelines:wofs-1.225d810e8504b8
libpng1.6@1.6.34-1ubuntu0.18.04.1
1.6.34-1ubuntu0.18.04.2
1
oscarfonts/h2:alpinef45075ef301f
libpng@1.6.34-r1
1.6.37-r0
1
pachyderm/dash:1.9.094e9a281e5a4
libpng1.6@1.6.28-1
1.6.28-1+deb9u1
1
pedrocesarti/jmeter-docker:3.314851f144f57
libpng1.6@1.6.28-1
1.6.28-1+deb9u1
1
radarbase/kafka-manager:1.3.3.181d2af7dd5a4e
libpng@1.6.34-r1
1.6.37-r0
1
raykrueger/riemann:0.2.14c8baf3de57bb
libpng1.6@1.6.28-1
1.6.28-1+deb9u1
1
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
libpng@1.6.29-r1
1.6.37-r0
1
richardchesterwood/k8s-fleetman-helm-demo:v1.0.0197f07fd1057
libpng@1.6.34-r1
1.6.37-r0
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
libpng1.6@1.6.28-1
1.6.28-1+deb9u1
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
libpng1.6@1.6.28-1
1.6.28-1+deb9u1
1
richardchesterwood/k8s-fleetman-webapp-angular:release2ed7d720878ac
libpng@1.6.34-r1
1.6.37-r0
1
rundeck/rundeck:3.0.16b13e8059ad72
openjdk-8@8u191-b12-2ubuntu0.16.04.1
8u222-b10-1ubuntu1~16.04.1
1
seldonio/apife:0.2.7ba81b17f00eb
libpng@1.6.34-r1
1.6.37-r0
1
seldonio/apife:0.3.1eea0d3f578ca
libpng@1.6.35-r0
1.6.37-r0
1
seldonio/cluster-manager:0.2.729e362bb1ba2
libpng@1.6.34-r1
1.6.37-r0
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
libpng@1.6.34-r1
1.6.37-r0
1
stakater/logrotate:3.13.05c0e01c23993
libpng@1.6.34-r1
1.6.37-r0
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
openjdk-8@8u151-b12-0ubuntu0.16.04.2
8u222-b10-1ubuntu1~16.04.1
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
libpng@1.6.34-r1
1.6.37-r0
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
firefox@57.0.4+build1-0ubuntu0.16.04.1
67.0+build2-0ubuntu0.16.04.1
1
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
libpng@1.6.34-r1
1.6.37-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.