CVE-2019-7317
MediumAdvisory
Published 4 Feb 2019In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.094
- 95th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 95
- of 17,781 indexed, latest versions
- Container images
- 79
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
libpng1.6 - security update
Carried by container images the latest versions of 95 of 17,781 indexed charts deploy, on 79 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libpng1.6deb | 1.6.28-1, 1.6.34-1ubuntu0.18.04.1 | 1.6.28-1+deb9u1, 1.6.34-1ubuntu0.18.04.2 | 40 |
| libpngapk | 1.6.29-r1, 1.6.34-r1, 1.6.35-r0 | 1.6.37-r0 | 30 |
| openjdk-8deb | 8u151-b12-0ubuntu0.16.04.2, 8u171-b11-0ubuntu0.16.04.1, 8u191-b12-2ubuntu0.16.04.1, 8u212-b03-0ubuntu1.18.04.1 | 8u222-b10-1ubuntu1~16.04.1, 8u222-b10-1ubuntu1~18.04.1 | 8 |
| firefoxdeb | 57.0.4+build1-0ubuntu0.16.04.1 | 67.0+build2-0ubuntu0.16.04.1 | 1 |
| openjdk-ltsdeb | 11.0.3+7-1ubuntu2~18.04.1 | 11.0.4+11-1ubuntu2~18.04.3 | 1 |
- OSV records
- ALPINE-CVE-2019-7317UBUNTU-CVE-2019-7317DSA-4435-1
- Also known as
- USN-3962-1, USN-3991-1, USN-4080-1, USN-4083-1, USN-8639-1
Charts affected
95 by stars
Container images carrying it
79 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| marcelmay/ | 6292c0a41ffa | libpng | 1.6.37-r0 | 8 |
| library/ | ce85468c5bad | libpng1.6 | 1.6.28-1+deb9u1 | 7 |
| cachethq/ | a61ff0f67ea7 | libpng | 1.6.37-r0 | 4 |
| gradiant/ | a1ee6de94c04 | libpng | 1.6.37-r0 | 4 |
| hyperledger/ | 4ce6f43ded2e | openjdk-8 | 8u222-b10-1ubuntu1~16.04.1 | 4 |
| hyperledger/ | f6c724592abf | openjdk-8 | 8u222-b10-1ubuntu1~16.04.1 | 4 |
| library/ | b1d09e971889 | libpng1.6 | 1.6.28-1+deb9u1 | 2 |
| nachomillangarcia/ | e4ce056f2d6d | libpng1.6 | 1.6.28-1+deb9u1 | 2 |
| neilpeterson/ | 84062718347c | libpng1.6 | 1.6.28-1+deb9u1 | 2 |
| solsson/ | 6f82e2b0464f | libpng1.6 | 1.6.28-1+deb9u1 | 2 |
| amancevice/ | c8c04bfe3d66 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| apacheignite/ | d7deab68b8fa | libpng | 1.6.37-r0 | 1 |
| astefanutti/ | 4ccf515e61eb | libpng | 1.6.37-r0 | 1 |
| bivas/ | 05545994f806 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| bryanalves/ | 95f73dce8b21 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| bryanalves/ | af47dfbb9413 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| cheyang/ | 46cc34755493 | openjdk-8 | 8u222-b10-1ubuntu1~16.04.1 | 1 |
| cloudve/ | f07f843f82e8 | libpng | 1.6.37-r0 | 1 |
| conduction/ | e1c176458aaf | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| conduction/ | 9e24264ea8f3 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| conduction/ | d3577ddd5c67 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| conduction/ | d8e23f10e882 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| conduction/ | 583d2cd8476c | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| conduction/ | d9b38e234de9 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| conduction/ | 353dc46303ac | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| conduction/ | 08524d8327b8 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| conduction/ | cf163d2b95b5 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| conduction/ | af3e9f551ad1 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| daskdev/ | 052630f5ca04 | libpng1.6 | 1.6.34-1ubuntu0.18.04.2 | 1 |
| gradiant/ | 45eceb1bc55c | libpng | 1.6.37-r0 | 1 |
| grafana/ | 104f434d47c8 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| grafana/ | a6b37f9afdd9 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| grafana/ | b5591419cfa3 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| hazelcast/ | ca7d5589744f | libpng | 1.6.37-r0 | 1 |
| hazelcast/ | df495e64ea65 | libpng | 1.6.37-r0 | 1 |
| hyperledger/ | c65891b6c237 | openjdk-8 | 8u222-b10-1ubuntu1~16.04.1 | 1 |
| igrantio/ | 852574120a1e | libpng | 1.6.37-r0 | 1 |
| jacobalberty/ | c409924e2463 | openjdk-8 | 8u222-b10-1ubuntu1~16.04.1 | 1 |
| jenkinsci/ | a1f33f004659 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| kimb88/ | 0639155241cb | libpng | 1.6.37-r0 | 1 |
| library/ | cb079c0d7a57 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| library/ | 41ed3a1a16b6 | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| library/ | 55390addbb1a | libpng | 1.6.37-r0 | 1 |
| library/ | f7988fb6c02e | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| library/ | 18a6c004398f | libpng | 1.6.37-r0 | 1 |
| library/ | 0ae5169e3d0f | libpng1.6 | 1.6.28-1+deb9u1 | 1 |
| lightbend/ | 0bedf37f428a | libpng | 1.6.37-r0 | 1 |
| linuxserver/ | 89cd8d5fb1ac | libpng | 1.6.37-r0 | 1 |
| lmenezes/ | 3e860068e403 | libpng | 1.6.37-r0 | 1 |
| lmenezes/ | 6684131caf5f | libpng1.6 | 1.6.28-1+deb9u1 | 1 |