Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
91
security advisorygentoobuffer overflowGentoo: GLSA-202303-10 Critical: jpegoptim Vulnerability Risk Assessment
Multiple vulnerabilities have been found in gif2png, the worst of which might allow execution of arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201203-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: gif2png: Multiple vulnerabilities Date: March 16, 2012 Bugs: #351698 ID: 201203-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in gif2png, the worst of which might allow execution of arbitrary code. Background ========= gif2png converts images from GIF format to PNG format. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-gfx/gif2png < 2.5.8 > = 2.5.8 Description ========== Two vulnerabilities have been found in gif2png: * A boundary error in gif2png.c could cause a buffer overflow (CVE-2010-4694). * The patch for CVE-2009-5018 causes gif2png to truncate GIF pathnames (CVE-2010-4695). Impact ===== A remote attacker could entice a user to open a specially crafted GIF file, possibly resulting in execution of arbitrary code, a Denial of Service condition, or the creation of PNG files in unintended directories. Workaround ========= There is no known workaround at this time. Resolution ========= All gif2png users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-gfx/gif2png-2.5.8" References ========= [ 1 ] CVE-2010-4694 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4694 [ 2 ] CVE-2010-4695 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2010-4695 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201203-15 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Mar 16, 2012
•Critical
Gentoo
91
security advisoryGentoostack overflowGentoo GLSA 201101-01 Normal: gif2png Stack Overflow Attack
gif2png contains a stack overflow vulnerability when parsing command line arguments.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201101-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: gif2png: User-assisted execution of arbitrary code Date: January 05, 2011 Bugs: #346501 ID: 201101-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= gif2png contains a stack overflow vulnerability when parsing command line arguments. Background ========= gif2png is a command line program that converts image files from the Graphics Interchange Format (GIF) format to the Portable Network Graphics (PNG) format. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-gfx/gif2png < 2.5.1-r1 > = 2.5.1-r1 Description ========== gif2png contains a command line parsing vulnerability that may result in a stack overflow due to an unexpectedly long input filename. Impact ===== A remote attacker could entice a user to open a specially crafted image, possibly resulting in the execution of arbitrary code with the privileges of the user running the application, or a Denial of Service. Note that applications relying on gif2png to process images can also trigger the vulnerability. Workaround ========= There is no known workaround at this time. Resolution ========= All gif2png users should upgrade to the latest stable version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-gfx/gif2png-2.5.1-r1" References ========= [ 1 ] CVE-2009-5018 https://www.cve.org/CVERecord?id=CVE-2009-5018 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201101-01 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Jan 05, 2011
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!