Ubuntu 23.10 USN-6586-1 critical: FreeImage denial of service

ubuntu

January 16, 2024

Several security issues were fixed in FreeImage.

Summary

Several security issues were fixed in FreeImage.

Software Description:

- freeimage: Support library for graphics image formats

Details:

It was discovered that FreeImage incorrectly handled certain memory

operations. If a user were tricked into opening a crafted TIFF file, a

remote attacker could use this issue to cause a heap buffer overflow,

resulting in a denial of service attack. This issue only affected Ubuntu

16.04 LTS and Ubuntu 20.04 LTS. (CVE-2019-12211)

It was discovered that FreeImage incorrectly processed images under

certain circumstances. If a user were tricked into opening a crafted TIFF

file, a remote attacker could possibly use this issue to cause a stack

exhaustion condition, resulting in a denial of service attack. This issue

only affected Ubuntu 16.04 LTS and Ubuntu 20.04 LTS. (CVE-2019-12213)

It was discovered that FreeImage incorrectly processed certain images.

If a user or automated system were tricked into opening a specially

crafte...

Read the Full Advisory

Topics Covered

security advisory denial of service software update Ubuntu critical alert FreeImage

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
   libfreeimage3                   3.18.0+ds2-9.1ubuntu0.1
   libfreeimageplus3               3.18.0+ds2-9.1ubuntu0.1

Ubuntu 23.04:
   libfreeimage3                   3.18.0+ds2-9ubuntu0.1
   libfreeimageplus3               3.18.0+ds2-9ubuntu0.1

Ubuntu 22.04 LTS:
   libfreeimage3                   3.18.0+ds2-6ubuntu5.1
   libfreeimageplus3               3.18.0+ds2-6ubuntu5.1

Ubuntu 20.04 LTS:
   libfreeimage3                   3.18.0+ds2-1ubuntu3.1
   libfreeimageplus3               3.18.0+ds2-1ubuntu3.1

Ubuntu 18.04 LTS (Available with Ubuntu Pro):
   libfreeimage3 3.17.0+ds1-5+deb9u1ubuntu0.1~esm1
   libfreeimageplus3 3.17.0+ds1-5+deb9u1ubuntu0.1~esm1

Ubuntu 16.04 LTS (Available with Ubuntu Pro):
   libfreeimage3                   3.17.0+ds1-2ubuntu0.1+esm1
   libfreeimageplus3               3.17.0+ds1-2ubuntu0.1+esm1

Ubuntu 14.04 LTS (Available with Ubuntu Pro):
   libfreeimage3                   3.15.4-3ubuntu0.1+esm3

In general, a standard system update will make all the necessary changes.