portage-ng / portage / media-libs / freeimage / 3.18.0-r11
portage-ng glsa
2 advisories reference media-libs/freeimage · none place version 3.18.0-r11 in a vulnerable range
▸ GLSA 202107-02 FreeImage: Multiple vulnerabilities this version unaffected low local, remote 2021-07-03

Multiple vulnerabilities have been found in FreeImage, the worst of which could result in a Denial of Service condition.

Announced
2021-07-03
Revised
2021-07-03
Access
local, remote
Bugs
#701850
Advisory
https://security.gentoo.org/glsa/202107-02

Affected packages

PackageArchVulnerableUnaffected
media-libs/freeimage*< 3.18.0-r2>= 3.18.0-r2

Background

FreeImage is an Open Source library project for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today’s multimedia applications.

Description

Multiple vulnerabilities have been discovered in FreeImage. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker, by enticing a user to process a specially crafted image file, could possibly cause a Denial of Service condition or other unspecified impact.

Workaround

There is no known workaround at this time.

Resolution

All FreeImage users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/freeimage-3.18.0-r2"

References

▸ GLSA 201701-68 FreeImage: Multiple vulnerabilities this version unaffected normal remote 2017-01-29

Multiple vulnerabilities have been found in FreeImage, the worst of which may allow execution of arbitrary code

Announced
2017-01-29
Revised
2017-01-29
Access
remote
Bugs
#559006 #596350
Advisory
https://security.gentoo.org/glsa/201701-68

Affected packages

PackageArchVulnerableUnaffected
media-libs/freeimage*< 3.15.4-r1>= 3.15.4-r1

Background

FreeImage is an Open Source library project for developers who would like to support popular graphics image formats like PNG, BMP, JPEG, TIFF and others as needed by today’s multimedia applications.

Description

Multiple vulnerabilities have been discovered in in FreeImage. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker, by enticing a user to process a specially crafted image file, could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All FreeImage users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/freeimage-3.15.4-r1"

References