Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

Fedora 39: 2023-125037736c Critical Buffer Overflow Fix For OptiPNG

fedora
Calendar Grey November 14, 2023
Scroller Fedora
Patch applied for optipng in Fedora 39 tackling buffer overflow vulnerability, fixed in update FEDORA-2023-127025849b.
Update to 0.7.8 Security fix for CVE-2023-43907

Summary

OptiPNG is a PNG optimizer that recompresses image files to a smaller size,

without losing any information. This program also converts external formats

(BMP, GIF, PNM and TIFF) to optimized PNG, and performs PNG integrity checks

and corrections.

Update Information:

Update to 0.7.8 Security fix for CVE-2023-43907

Topics%20covered

Topics Covered

security advisory update buffer overflow critical Fedora security fix OptiPNG

Change Log

* Sun Nov 5 2023 Peter Hanecak - 0.7.8-1 - Update to 0.7.8

References


[ 1 ] Bug #2242461 - CVE-2023-43907 optipng: global buffer overflow via the 'buffer' variable at gifread.c. [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2242461 [ 2 ] Bug #2247874 - optipng-0.7.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2247874

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-125037736c' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: optipng
Product: Fedora 39
Version: 0.7.8
Release: 1.fc39
URL:
Summary: PNG optimizer and converter

Topics%20covered

Topics Covered

security advisory update buffer overflow critical Fedora security fix OptiPNG

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.