Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora 38: 2023-ae05c3bca8 Critical: OptiPNG Buffer Overflow Risk

fedora
Calendar Grey November 14, 2023
Dist Fedora Esm H88
Urgent security bulletin for Fedora 38 regarding optipng's buffer overflow vulnerability found in version 0.7.8.
Update to 0.7.8 Security fix for CVE-2023-43907

Summary

OptiPNG is a PNG optimizer that recompresses image files to a smaller size,

without losing any information. This program also converts external formats

(BMP, GIF, PNM and TIFF) to optimized PNG, and performs PNG integrity checks

and corrections.

Update Information:

Update to 0.7.8 Security fix for CVE-2023-43907

Topics%20covered

Topics Covered

security advisory buffer overflow Fedora security fix critical update software management optipng

Change Log

* Sun Nov 5 2023 Peter Hanecak - 0.7.8-1 - Update to 0.7.8 * Thu Jul 20 2023 Fedora Release Engineering - 0.7.7-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

References


[ 1 ] Bug #2242461 - CVE-2023-43907 optipng: global buffer overflow via the 'buffer' variable at gifread.c. [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2242461 [ 2 ] Bug #2247874 - optipng-0.7.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2247874

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-ae05c3bca8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: optipng
Product: Fedora 38
Version: 0.7.8
Release: 1.fc38
URL:
Summary: PNG optimizer and converter

Topics%20covered

Topics Covered

security advisory buffer overflow Fedora security fix critical update software management optipng

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here