This update fixes a denial of service vulnerability in leptonlib. It can be made to crash with an arithmetic exception on specially crafted JPEG files. (CVE-2022-38266) References: . MGASA-2022-0472 - Updated leptonica packages fix security vulnerability Publication date: 17 Dec 2022 URL: https://advisories.mageia.org/MGASA-2022-0472.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-38266 This update fixes a denial of service vulnerability in leptonlib. It can be made to crash with an arithmetic exception on specially crafted JPEG files. (CVE-2022-38266) References: - https://bugs.mageia.org/show_bug.cgi?id=31266 - https://lists.debian.org/debian-lts-announce/2022/12/msg00018.html - https://www.cve.org/CVERecord?id=CVE-2022-38266 SRPMS: - 8/core/leptonica-1.81.0-1.mga8 - 8/core/mingw-leptonica-1.81.0-1.mga8 . Mageia 2022-0472 outlines an update for leptonica that addresses a denial of service vulnerability caused by specifically designed JPEG images.. Mageia 8 Update, Leptonica Security Issue, JPEG File Vulnerability. . LinuxSecurity.com Team
Add mingw subpackages.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-6746739d52 2022-03-26 14:56:28.650826 --------------------------------------------------------------------------------Name : leptonica Product : Fedora 36 Version : 1.82.0 Release : 6.fc36 URL : https://github.com/danbloomberg/leptonica Summary : C library for efficient image processing and image analysis operations Description : The library supports many operations that are useful on * Document images * Natural images Fundamental image processing and image analysis operations * Rasterop (aka bitblt) * Affine transforms (scaling, translation, rotation, shear) on images of arbitrary pixel depth * Projective and bi-linear transforms * Binary and gray scale morphology, rank order filters, and convolution * Seed-fill and connected components * Image transformations with changes in pixel depth, both at the same scale and with scale change * Pixelwise masking, blending, enhancement, arithmetic ops, etc. --------------------------------------------------------------------------------Update Information: Add mingw subpackages. --------------------------------------------------------------------------------ChangeLog: * Thu Feb 24 2022 Sandro Mani - 1.82.0-6 - Fix broken pkg-config file * Thu Feb 24 2022 Sandro Mani - 1.82.0-5 - Make mingw subpackages noarch * Thu Feb 24 2022 Sandro Mani - 1.82.0-4 - Make mingw subpackages noarch * Sat Feb 19 2022 Sandro Mani - 1.82.0-3 - Add mingw subpackage - Port to cmake --------------------------------------------------------------------------------References: [ 1 ] Bug #2060171 - F36FailsToInstall: mingw64-freeimage, mingw32-freeimage https://bugzilla.redhat.com/show_bug.cgi?id=2060171 [ 2 ] Bug #2060172 - F36FailsToInstall: mingw32-gdal, mingw64-gdal https://bugzilla.redhat.com/show_bug.cgi?id=2060172 [ 3 ]Bug #2060174 - F36FailsToInstall: mingw32-opencv, mingw64-opencv https://bugzilla.redhat.com/show_bug.cgi?id=2060174 [ 4 ] Bug #2060175 - F36FailsToInstall: mingw32-poppler, mingw64-poppler https://bugzilla.redhat.com/show_bug.cgi?id=2060175 [ 5 ] Bug #2060176 - F36FailsToInstall: mingw32-python3-shapely, mingw64-python3-shapely https://bugzilla.redhat.com/show_bug.cgi?id=2060176 [ 6 ] Bug #2060177 - F36FailsToInstall: mingw32-qtspell-qt5, mingw64-qtspell-qt5 https://bugzilla.redhat.com/show_bug.cgi?id=2060177 [ 7 ] Bug #2060358 - F36FailsToInstall: mingw32-python3-pyproj, mingw64-python3-pyproj https://bugzilla.redhat.com/show_bug.cgi?id=2060358 [ 8 ] Bug #2060816 - F36FailsToInstall: mingw64-SDL2_image, mingw32-SDL2_image https://bugzilla.redhat.com/show_bug.cgi?id=2060816 [ 9 ] Bug #2060818 - F36FailsToInstall: mingw32-qt5-qtimageformats, mingw64-qt5-qtimageformats https://bugzilla.redhat.com/show_bug.cgi?id=2060818 [ 10 ] Bug #2060819 - F36FailsToInstall: mingw32-qt5-qtwebkit, mingw64-qt5-qtwebkit https://bugzilla.redhat.com/show_bug.cgi?id=2060819 [ 11 ] Bug #2060820 - F36FailsToInstall: mingw32-qt6-qtimageformats, mingw64-qt6-qtimageformats https://bugzilla.redhat.com/show_bug.cgi?id=2060820 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-6746739d52' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c (CVE-2020-36277). Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c (CVE-2020-36278). . MGASA-2021-0290 - Updated leptonica packages fix security vulnerabilities Publication date: 28 Jun 2021 URL: https://advisories.mageia.org/MGASA-2021-0290.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-36277, CVE-2020-36278, CVE-2020-36279, CVE-2020-36280, CVE-2020-36281 Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c (CVE-2020-36277). Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c (CVE-2020-36278). Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c (CVE-2020-36279). Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c (CVE-2020-36280). Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c (CVE-2020-36281). References: - https://bugs.mageia.org/show_bug.cgi?id=28994 - https://lists.fedoraproject.org/archives/list/
Update to leptonica-1.80.0, see http://leptonica.org/source/version-notes.html for details.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-977ebc82da 2021-04-19 17:50:37.463519 --------------------------------------------------------------------------------Name : leptonica Product : Fedora 32 Version : 1.80.0 Release : 3.fc32 URL : https://github.com/danbloomberg/leptonica Summary : C library for efficient image processing and image analysis operations Description : The library supports many operations that are useful on * Document images * Natural images Fundamental image processing and image analysis operations * Rasterop (aka bitblt) * Affine transforms (scaling, translation, rotation, shear) on images of arbitrary pixel depth * Projective and bi-linear transforms * Binary and gray scale morphology, rank order filters, and convolution * Seed-fill and connected components * Image transformations with changes in pixel depth, both at the same scale and with scale change * Pixelwise masking, blending, enhancement, arithmetic ops, etc. --------------------------------------------------------------------------------Update Information: Update to leptonica-1.80.0, see http://leptonica.org/source/version-notes.html for details. --------------------------------------------------------------------------------ChangeLog: * Tue Feb 9 2021 Pavel Cahyna - 1.80.0-3 - Make gnuplot build dependency optional, used only by tests * Tue Jan 26 2021 Fedora Release Engineering - 1.80.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Thu Jul 30 2020 Sandro Mani - 1.80.0-1 - Update to 1.80.0 * Tue Jul 28 2020 Fedora Release Engineering - 1.79.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1939138 -CVE-2020-36281 leptonica: heap-based buffer overflow in pixFewColorsOctcubeQuantMixed in colorquant1.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939138 [ 2 ] Bug #1939139 - CVE-2020-36281 mingw-leptonica: leptonica: heap-based buffer overflow in pixFewColorsOctcubeQuantMixed in colorquant1.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939139 [ 3 ] Bug #1939194 - CVE-2020-36277 leptonica: DoS via an incorrect left shift in pixConvert2To8 in pixconv.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939194 [ 4 ] Bug #1939195 - CVE-2020-36277 mingw-leptonica: leptonica: DoS via an incorrect left shift in pixConvert2To8 in pixconv.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939195 [ 5 ] Bug #1939196 - CVE-2020-36277 leptonica: DoS via an incorrect left shift in pixConvert2To8 in pixconv.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1939196 [ 6 ] Bug #1939201 - CVE-2020-36278 leptonica: heap-based buffer overflow in findNextBorderPixel in ccbord.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939201 [ 7 ] Bug #1939202 - CVE-2020-36278 mingw-leptonica: leptonica: heap-based buffer overflow in findNextBorderPixel in ccbord.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939202 [ 8 ] Bug #1939207 - CVE-2020-36279 leptonica: heap-based buffer overflow in rasteropGeneralLow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939207 [ 9 ] Bug #1939208 - CVE-2020-36279 mingw-leptonica: leptonica: heap-based buffer overflow in rasteropGeneralLow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939208 [ 10 ] Bug #1939211 - CVE-2020-36280 leptonica: heap-based buffer overflow in pixReadFromTiffStream [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939211 [ 11 ] Bug #1939212 - CVE-2020-36280 mingw-leptonica: leptonica: heap-based buffer overflow in pixReadFromTiffStream [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939212 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-977ebc82da' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Update to leptonica-1.80.0, see http://leptonica.org/source/version-notes.html for details.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-f5f2803fff 2021-04-19 17:43:39.804525 --------------------------------------------------------------------------------Name : leptonica Product : Fedora 33 Version : 1.80.0 Release : 3.fc33 URL : https://github.com/danbloomberg/leptonica Summary : C library for efficient image processing and image analysis operations Description : The library supports many operations that are useful on * Document images * Natural images Fundamental image processing and image analysis operations * Rasterop (aka bitblt) * Affine transforms (scaling, translation, rotation, shear) on images of arbitrary pixel depth * Projective and bi-linear transforms * Binary and gray scale morphology, rank order filters, and convolution * Seed-fill and connected components * Image transformations with changes in pixel depth, both at the same scale and with scale change * Pixelwise masking, blending, enhancement, arithmetic ops, etc. --------------------------------------------------------------------------------Update Information: Update to leptonica-1.80.0, see http://leptonica.org/source/version-notes.html for details. --------------------------------------------------------------------------------ChangeLog: * Tue Feb 9 2021 Pavel Cahyna - 1.80.0-3 - Make gnuplot build dependency optional, used only by tests * Tue Jan 26 2021 Fedora Release Engineering - 1.80.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1939138 - CVE-2020-36281 leptonica: heap-based buffer overflow in pixFewColorsOctcubeQuantMixed in colorquant1.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939138 [ 2 ] Bug#1939139 - CVE-2020-36281 mingw-leptonica: leptonica: heap-based buffer overflow in pixFewColorsOctcubeQuantMixed in colorquant1.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939139 [ 3 ] Bug #1939194 - CVE-2020-36277 leptonica: DoS via an incorrect left shift in pixConvert2To8 in pixconv.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939194 [ 4 ] Bug #1939195 - CVE-2020-36277 mingw-leptonica: leptonica: DoS via an incorrect left shift in pixConvert2To8 in pixconv.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939195 [ 5 ] Bug #1939196 - CVE-2020-36277 leptonica: DoS via an incorrect left shift in pixConvert2To8 in pixconv.c [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=1939196 [ 6 ] Bug #1939201 - CVE-2020-36278 leptonica: heap-based buffer overflow in findNextBorderPixel in ccbord.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939201 [ 7 ] Bug #1939202 - CVE-2020-36278 mingw-leptonica: leptonica: heap-based buffer overflow in findNextBorderPixel in ccbord.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939202 [ 8 ] Bug #1939207 - CVE-2020-36279 leptonica: heap-based buffer overflow in rasteropGeneralLow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939207 [ 9 ] Bug #1939208 - CVE-2020-36279 mingw-leptonica: leptonica: heap-based buffer overflow in rasteropGeneralLow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939208 [ 10 ] Bug #1939211 - CVE-2020-36280 leptonica: heap-based buffer overflow in pixReadFromTiffStream [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939211 [ 11 ] Bug #1939212 - CVE-2020-36280 mingw-leptonica: leptonica: heap-based buffer overflow in pixReadFromTiffStream [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1939212 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program.Use su -c 'dnf upgrade --advisory FEDORA-2021-f5f2803fff' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Update to leptonica-1.77.0, see http://www.leptonica.org for details.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-4db33b3753 2018-12-30 03:20:44.907835 --------------------------------------------------------------------------------Name : mingw-leptonica Product : Fedora 29 Version : 1.77.0 Release : 1.fc29 URL : https://github.com/danbloomberg/leptonica Summary : MinGW Windows Leptonica library Description : MinGW Windows Leptonica library. --------------------------------------------------------------------------------Update Information: Update to leptonica-1.77.0, see http://www.leptonica.org for details. --------------------------------------------------------------------------------ChangeLog: * Wed Dec 19 2018 Sandro Mani - 1.77.0-1 - Update to 1.77.0 --------------------------------------------------------------------------------References: [ 1 ] Bug #1549742 - CVE-2018-7441 leptonica: hardcoded /tmp paths https://bugzilla.redhat.com/show_bug.cgi?id=1549742 [ 2 ] Bug #1549734 - CVE-2018-7442 leptonica: directory traversal in gplot rootname argument https://bugzilla.redhat.com/show_bug.cgi?id=1549734 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-4db33b3753' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Update to leptonica-1.77.0, see http://www.leptonica.org for details.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-4db33b3753 2018-12-30 03:20:44.907835 --------------------------------------------------------------------------------Name : leptonica Product : Fedora 29 Version : 1.77.0 Release : 1.fc29 URL : https://github.com/danbloomberg/leptonica Summary : C library for efficient image processing and image analysis operations Description : The library supports many operations that are useful on * Document images * Natural images Fundamental image processing and image analysis operations * Rasterop (aka bitblt) * Affine transforms (scaling, translation, rotation, shear) on images of arbitrary pixel depth * Projective and bi-linear transforms * Binary and gray scale morphology, rank order filters, and convolution * Seed-fill and connected components * Image transformations with changes in pixel depth, both at the same scale and with scale change * Pixelwise masking, blending, enhancement, arithmetic ops, etc. --------------------------------------------------------------------------------Update Information: Update to leptonica-1.77.0, see http://www.leptonica.org for details. --------------------------------------------------------------------------------ChangeLog: * Wed Dec 19 2018 Sandro Mani - 1.77.0-1 - Update to 1.77.0 --------------------------------------------------------------------------------References: [ 1 ] Bug #1549742 - CVE-2018-7441 leptonica: hardcoded /tmp paths https://bugzilla.redhat.com/show_bug.cgi?id=1549742 [ 2 ] Bug #1549734 - CVE-2018-7442 leptonica: directory traversal in gplot rootname argument https://bugzilla.redhat.com/show_bug.cgi?id=1549734 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su-c 'dnf upgrade --advisory FEDORA-2018-4db33b3753' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Update to leptonica-1.77.0, see http://www.leptonica.org for details.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-93a16d053f 2018-12-29 02:24:45.592262 --------------------------------------------------------------------------------Name : leptonica Product : Fedora 28 Version : 1.77.0 Release : 1.fc28 URL : https://github.com/danbloomberg/leptonica Summary : C library for efficient image processing and image analysis operations Description : The library supports many operations that are useful on * Document images * Natural images Fundamental image processing and image analysis operations * Rasterop (aka bitblt) * Affine transforms (scaling, translation, rotation, shear) on images of arbitrary pixel depth * Projective and bi-linear transforms * Binary and gray scale morphology, rank order filters, and convolution * Seed-fill and connected components * Image transformations with changes in pixel depth, both at the same scale and with scale change * Pixelwise masking, blending, enhancement, arithmetic ops, etc. --------------------------------------------------------------------------------Update Information: Update to leptonica-1.77.0, see http://www.leptonica.org for details. --------------------------------------------------------------------------------ChangeLog: * Wed Dec 19 2018 Sandro Mani - 1.77.0-1 - Update to 1.77.0 * Fri Jul 13 2018 Fedora Release Engineering - 1.76.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Thu May 3 2018 Sandro Mani - 1.76.0-1 - Update to 1.76.0 --------------------------------------------------------------------------------References: [ 1 ] Bug #1549734 - CVE-2018-7442 leptonica: directory traversal in gplot rootname argument https://bugzilla.redhat.com/show_bug.cgi?id=1549734 [ 2 ] Bug #1549742 - CVE-2018-7441 leptonica: hardcoded /tmp paths https://bugzilla.redhat.com/show_bug.cgi?id=1549742 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-93a16d053f' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.