XLI and Xloadimage contain a vulnerability which could potentially result in the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-gfx/xli | * | < 1.17.0-r2 | >= 1.17.0-r2 |
| media-gfx/xloadimage | * | < 4.1-r4 | >= 4.1-r4 |
XLI and Xloadimage are X11 image manipulation utilities.
When XLI or Xloadimage process an image, they create a new image object to contain the new image, copying the title from the old image to the newly created image. Ariel Berkman reported that the 'zoom', 'reduce', and 'rotate' functions use a fixed length buffer to contain the new title, which could be overwritten by the NIFF or XPM image processors.
A malicious user could craft a malicious XPM or NIFF file and entice a user to view it using XLI, or manipulate it using Xloadimage, potentially resulting in the execution of arbitrary code with the permissions of the user running XLI or Xloadimage.
There is no known workaround at this time.
All XLI users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-gfx/xli-1.17.0-r2"
All Xloadimage users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-gfx/xloadimage-4.1-r4"
xli and xloadimage are vulnerable to multiple issues, potentially leading to the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-gfx/xli | * | < 1.17.0-r1 | >= 1.17.0-r1 |
| media-gfx/xloadimage | * | < 4.1-r2 | >= 4.1-r2 |
xli and xloadimage are X11 utilities for displaying and manipulating a wide range of image formats.
Tavis Ormandy of the Gentoo Linux Security Audit Team has reported that xli and xloadimage contain a flaw in the handling of compressed images, where shell meta-characters are not adequately escaped. Rob Holland of the Gentoo Linux Security Audit Team has reported that an xloadimage vulnerability in the handling of Faces Project images discovered by zen-parse in 2001 remained unpatched in xli. Additionally, it has been reported that insufficient validation of image properties in xli could potentially result in buffer management errors.
Successful exploitation would permit a remote attacker to execute arbitrary shell commands, or arbitrary code with the privileges of the xloadimage or xli user.
There is no known workaround at this time.
All xli users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-gfx/xli-1.17.0-r1"
All xloadimage users should also upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-gfx/xloadimage-4.1-r2"