Multiple vulnerabilities have been found in OptiPNG, the worst of which may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-gfx/optipng | * | < 0.7.6-r2 | >= 0.7.6-r2 |
OptiPNG is a PNG optimizer that re-compresses image files to a smaller size, without losing any information.
Multiple vulnerabilities have been discovered in OptiPNG. Please review the referenced CVE identifiers for details.
A remote attacker could entice a user to process a specially crafted image file, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All OptiPNG users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-gfx/optipng-0.7.6-r2"
Multiple vulnerabilities have been found in OptiPNG, the worst of which could lead to the remote execution of arbitrary code, or cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-gfx/optipng | * | < 0.7.6 | >= 0.7.6 |
OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information.
Multiple vulnerabilities have been discovered in OptiPNG. Please review the CVE identifiers referenced below for details.
A remote attacker could entice a user to open a specially crafted image file resulting in the execution of arbitrary code with the privileges of the process, or a Denial of Service condition.
There is no known workaround at this time.
All OptiPNG users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-gfx/optipng-0.7.6"
A use-after-free error in OptiPNG could result in execution of arbitrary code or Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-gfx/optipng | * | < 0.7.3 | >= 0.7.3 |
OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information.
A use-after-free vulnerability exists in the palette reduction functionality of OptiPNG.
A remote attacker could entice a user to open a specially crafted image file, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All OptiPNG users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-gfx/optipng-0.7.3"
A vulnerability in OptiPNG might result in user-assisted execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-gfx/optipng | * | < 0.6.2-r1 | >= 0.6.2-r1 |
OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information.
Roy Tam reported a use-after-free vulnerability in the GIFReadNextExtension() function in lib/pngxtern/gif/gifread.c leading to a memory corruption when reading a GIF image.
A remote attacker could entice a user to process a specially crafted GIF image, possibly resulting in the execution of arbitrary code with the privileges of the user running the application, or a Denial of Service.
There is no known workaround at this time.
All OptiPNG users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-gfx/optipng-0.6.2-r1"
A vulnerability in OptiPNG might result in user-assisted execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-gfx/optipng | * | < 0.6.2 | >= 0.6.2 |
OptiPNG is a PNG optimizer that recompresses image files to a smaller size, without losing any information.
A buffer overflow in the BMP reader in OptiPNG has been reported.
A remote attacker could entice a user to process a specially crafted BMP image, possibly resulting in the execution of arbitrary code with the privileges of the user running the application, or a Denial of Service.
There is no known workaround at this time.
All OptiPNG users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-gfx/optipng-0.6.2"