Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 554
Alerts This Week
Warning Icon 1 554

Fedora 40: 2024-c4d32d51c9 Critical: FreeImage Buffer Overflow

fedora
Calendar Grey March 23, 2024
Dist Fedora Esm H88
Essential updates for FreeImage in Fedora 40 have been implemented to resolve critical buffer overflow and infinite loop vulnerabilities linked to two specific CVEs.
Add downstream fixes for CVE-2023-47995 and CVE-2023-47997.

Summary

FreeImage is a library for developers who would like to support popular

graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by

today's multimedia applications.

Update Information:

Add downstream fixes for CVE-2023-47995 and CVE-2023-47997.

Topics%20covered

Topics Covered

security advisory update buffer overflow Fedora infinite loop FreeImage

Change Log

* Sun Mar 10 2024 Sandro Mani - 3.19.0-0.23.svn1909 - Add downstream patches for CVE-2023-47997, CVE-2023-47995

References


[ 1 ] Bug #2257661 - CVE-2023-47995 freeimage: Buffer Overflow vulnerability in FreeImage_AllocateBitmap [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2257661 [ 2 ] Bug #2257665 - CVE-2023-47997 freeimage: infinite loop exits in Load in PluginTIFF.cpp [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2257665 [ 3 ] Bug #2257666 - CVE-2023-47995 mingw-freeimage: FreeImage: Buffer Overflow vulnerability in FreeImage_AllocateBitmap [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2257666 [ 4 ] Bug #2257670 - CVE-2023-47997 mingw-freeimage: FreeImage: infinite loop exits in Load in PluginTIFF.cpp [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2257670

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-c4d32d51c9' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: freeimage
Product: Fedora 40
Version: 3.19.0
Release: 0.23.svn1909.fc40
URL: https://freeimage.sourceforge.io/
Summary: Multi-format image decoder library

Topics%20covered

Topics Covered

security advisory update buffer overflow Fedora infinite loop FreeImage

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.