Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 39 FEDORA-2023-8e640cb540 Moderate: FreeImage Buffer Overflow

fedora
Calendar Grey November 3, 2023
Dist Fedora Esm H88
Debian 11 issues patches addressing critical vulnerabilities in the OpenSSL package enhancing overall system integrity.
Downstream fixes for CVE-2021-40266 CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-40263

Summary

FreeImage is a library for developers who would like to support popular

graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by

today's multimedia applications.

Update Information:

Downstream fixes for CVE-2021-40266 CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-40263

Change Log

* Thu Sep 28 2023 Sandro Mani - 3.19.0-0.20.svn1909 - Downstream fixes for CVE-2021-40266 CVE-2020-24292 CVE-2020-24293 CVE-2020-24295 CVE-2021-40263

References


[ 1 ] Bug #2235420 - CVE-2020-24292 mingw-freeimage: freeimage: buffer overflow in load() in PluginICO.cpp [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2235420 [ 2 ] Bug #2235422 - CVE-2020-24292 freeimage: buffer overflow in load() in PluginICO.cpp [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2235422 [ 3 ] Bug #2235425 - CVE-2020-24293 freeimage: buffer overflow in psdThumbnail::Read() in PSDParser.cpp [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2235425 [ 4 ] Bug #2235426 - CVE-2020-24293 mingw-freeimage: freeimage: buffer overflow in psdThumbnail::Read() in PSDParser.cpp [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2235426 [ 5 ] Bug #2235434 - CVE-2020-24295 freeimage: buffer overflow in ReadImageLine() in PSDParser.cpp [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2235434 [ 6 ] Bug #2235435 - CVE-2020-24295 mingw-freeimage: freeimage: buffer overflow in ReadIm...

Read the Full Advisory

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-8e640cb540' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: freeimage
Product: Fedora 39
Version: 3.19.0
Release: 0.20.svn1909.fc39
Summary: Multi-format image decoder library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here