IBM Security Bulletin: Vulnerabilities in libpng affect NVIDIA Linux device drivers for System x, Flex and BladeCenter Systems (CVE-2015-8472, CVE-2015-7981, CVE-2015-8126)
NVIDIA device drivers for 32-bit and 64-bit Linux have addressed the following vulnerabilities in libpng.
CVE(s): CVE-2015-8472, CVE-2015-8126, CVE-2015-7981
Affected product(s) and affected version(s):
NVIDIA for Linux OS 32-bit361.42
NVIDIA for Linux OS 64-bit361.42
| System/Vulnerable to CVE | CVE-2015-8472 | CVE-2015-7981 | CVE-2015-8126 |
|---|---|---|---|
| BladeCenter HS22 | x | x | x |
| BladeCenter HS23/HS23E | na | x | x |
| BladeCenter HS22V | x | na | na |
| Flex System x220 M4 | x | x | x |
| Flex System x240 M4 | x | x | x |
| iDataPlex dx360 M2 | na | x | x |
| iDataPlex dx360 M3 | x | x | x |
| iDataPlex dx360 M4 | x | x | x |
| iDataPlex dx360 M4 Water Cooled | na | x | x |
| NeXtScale nx360 M4 | x | x | x |
| System x3500 M2 | na | x | x |
| System x3550 M2 | na | x | x |
| System x3650 M2 | na | x | x |
| System x3500 M3 | na | x | x |
| System x3550 M3 | x | x | x |
| System x3630 M3 | x | x | x |
| System x3650 M3 | x | x | x |
| System x3100 M4 | na | x | x |
| System x3300 M4 | x | x | x |
| System x3500 M4 | x | x | x |
| System x3530 M4 | x | x | x |
| System x3550 M4 | x | x | x |
| System x3630 M4 | x | x | x |
| System x3650 M4 | x | x | x |
| System x3650 M4 BD | x | x | x |
| System x3650 M4 HD | x | x | x |
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2ccHUVN
X-Force Database: http://ift.tt/1QDehfR
http://ift.tt/1SUCktK
http://ift.tt/1QDehw5
from IBM Product Security Incident Response Team http://ift.tt/2dfs7Hp