Stay Secure with the Latest Linux Advisories

security advisoryupdatecritical

Fedora 38: FEDORA-2023-c3ed718f2b Urgent: ImageMagick Buffer Underflow

AutoTrace ver. 0.31.9. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-b2db61249b 2022-09-12 17:36:48.819245 --------------------------------------------------------------------------------Name : autotrace Product : Fedora 37 Version : 0.31.9 Release : 1.fc37 URL : Summary : Utility for converting bitmaps to vector graphics Description : AutoTrace is a program for converting bitmaps to vector graphics. Supported input formats include BMP, TGA, PNM, PPM, and any format supported by ImageMagick, whereas output can be produced in Postscript, SVG, xfig, SWF, and others. --------------------------------------------------------------------------------Update Information: AutoTrace ver. 0.31.9 --------------------------------------------------------------------------------ChangeLog: * Tue Aug 30 2022 Peter Lemenkov - 0.31.9-1 - Ver. 0.31.9 (API/ABI compatible) --------------------------------------------------------------------------------References: [ 1 ] Bug #2121826 - CVE-2022-32323 autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2121826 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-b2db61249b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . AutoTrace version 0.31.9 has been released for Fedora 37, addressing a critical heap overflow vulnerability and providing detailed implementation guidelines. Fedora Update, AutoTrace Fix, Heap Overflow Issue. . Severity: Critical. LinuxSecurity.com Team

Sep 12, 2022 •Critical Fedora