Описание
libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 (or later) when processing untrusted input.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | not-affected | 8.15.1-1.1build4 |
| esm-apps-legacy/xenial | not-affected | code not present |
| esm-apps/bionic | not-affected | code not present |
| esm-apps/focal | not-affected | code not present |
| esm-apps/jammy | released | 8.12.1-1ubuntu0.1~esm1 |
| esm-apps/noble | not-affected | 8.15.1-1.1build4 |
| esm-apps/resolute | not-affected | 8.15.1-1.1build4 |
| esm-apps/xenial | not-affected | code not present |
| focal | not-affected | code not present |
Показывать по
Ссылки на источники
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 (or later) when processing untrusted input.
libvips is a demand-driven, horizontally threaded image processing lib ...
ALT-PU-2024-5975: package `vips` update to version 8.15.1-alt1
EPSS
5.5 Medium
CVSS3