[Bug 2122358] New: CVE-2020-35533 LibRaw: Out-of-bounds read in LibRaw::adobe_copy_pixel() function
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2122358
Bug ID: 2122358
Summary: CVE-2020-35533 LibRaw: Out-of-bounds read in
LibRaw::adobe_copy_pixel() function
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: psampaio(a)redhat.com
CC: dchen(a)redhat.com, debarshir(a)redhat.com,
epel-packagers-sig(a)lists.fedoraproject.org,
gwync(a)protonmail.com, hobbes1069(a)gmail.com,
jridky(a)redhat.com, manisandro(a)gmail.com,
mattdm(a)redhat.com, mattia.verga(a)proton.me,
michel(a)michel-slm.name, ngompa13(a)gmail.com,
nphilipp(a)redhat.com, sebastian(a)sdziallas.com,
sergio(a)serjux.com, siddharth.kde(a)gmail.com,
sipoyare(a)redhat.com, thibault(a)north.li
Target Milestone: ---
Classification: Other
In LibRaw, an out-of-bounds read vulnerability exists within the
"LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dng.cpp) when
reading data from the image file.
Upstream issue:
https://github.com/LibRaw/LibRaw/issues/273
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2122358
1 year, 6 months
[Bug 2122357] New: CVE-2020-35532 LibRaw: Out-of-bounds read in simple_decode_row() function
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2122357
Bug ID: 2122357
Summary: CVE-2020-35532 LibRaw: Out-of-bounds read in
simple_decode_row() function
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: psampaio(a)redhat.com
CC: dchen(a)redhat.com, debarshir(a)redhat.com,
epel-packagers-sig(a)lists.fedoraproject.org,
gwync(a)protonmail.com, hobbes1069(a)gmail.com,
jridky(a)redhat.com, manisandro(a)gmail.com,
mattdm(a)redhat.com, mattia.verga(a)proton.me,
michel(a)michel-slm.name, ngompa13(a)gmail.com,
nphilipp(a)redhat.com, sebastian(a)sdziallas.com,
sergio(a)serjux.com, siddharth.kde(a)gmail.com,
sipoyare(a)redhat.com, thibault(a)north.li
Target Milestone: ---
Classification: Other
In LibRaw, an out-of-bounds read vulnerability exists within the
"simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can
be triggered via an image with a large row_stride field.
Upstream issue:
https://github.com/LibRaw/LibRaw/issues/271
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2122357
1 year, 6 months
[Bug 2122356] New: CVE-2020-35531 LibRaw: Out-of-bounds read in get_huffman_diff() function
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2122356
Bug ID: 2122356
Summary: CVE-2020-35531 LibRaw: Out-of-bounds read in
get_huffman_diff() function
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: psampaio(a)redhat.com
CC: dchen(a)redhat.com, debarshir(a)redhat.com,
epel-packagers-sig(a)lists.fedoraproject.org,
gwync(a)protonmail.com, hobbes1069(a)gmail.com,
jridky(a)redhat.com, manisandro(a)gmail.com,
mattdm(a)redhat.com, mattia.verga(a)proton.me,
michel(a)michel-slm.name, ngompa13(a)gmail.com,
nphilipp(a)redhat.com, sebastian(a)sdziallas.com,
sergio(a)serjux.com, siddharth.kde(a)gmail.com,
sipoyare(a)redhat.com, thibault(a)north.li
Target Milestone: ---
Classification: Other
In LibRaw, an out-of-bounds read vulnerability exists within the
get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched.cpp) when reading
data from an image file.
Upstream issue:
https://github.com/LibRaw/LibRaw/issues/270
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2122356
1 year, 6 months
[Bug 2110169] New: 'zbar' Python bindings are unusable in Fedora 36.
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2110169
Bug ID: 2110169
Summary: 'zbar' Python bindings are unusable in Fedora 36.
Product: Fedora
Version: 36
Hardware: x86_64
Status: NEW
Component: zbar
Severity: urgent
Assignee: gwync(a)protonmail.com
Reporter: august(a)schwerdfeger.name
QA Contact: extras-qa(a)fedoraproject.org
CC: dougsland(a)redhat.com,
epel-packagers-sig(a)lists.fedoraproject.org,
gwync(a)protonmail.com, mchehab(a)infradead.org,
mr.marcelo.barbosa(a)gmail.com, negativo17(a)gmail.com
Target Milestone: ---
Classification: Fedora
Created attachment 1898987
--> https://bugzilla.redhat.com/attachment.cgi?id=1898987&action=edit
Backtrace of segfault when attempting to import the 'zbar' module.
Description of problem:
Any attempt to import the 'zbar' module within Python causes the interpreter to
crash with a segfault (backtrace attached).
This did not occur with Fedora 35 or earlier.
Version-Release number of selected component (if applicable):
zbar-python3-0.23-14.fc36.x86_64
Steps to Reproduce:
1. Start the Python interpreter.
2. Type 'import zbar' at the REPL loop.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2110169
1 year, 6 months
[Bug 2126824] New: CVE-2022-3213 ImageMagick: heap buffer overflow while processing a malformed TIFF file
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2126824
Bug ID: 2126824
Summary: CVE-2022-3213 ImageMagick: heap buffer overflow while
processing a malformed TIFF file
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: trathi(a)redhat.com
CC: blaise(a)gmail.com, dcavalca(a)fb.com,
epel-packagers-sig(a)lists.fedoraproject.org,
fedora(a)famillecollet.com, jhorak(a)redhat.com,
luya_tfz(a)thefinalzone.net, michel(a)michel-slm.name,
ngompa13(a)gmail.com, pampelmuse(a)gmx.at,
sergio(a)serjux.com, troy(a)troycurtisjr.com
Target Milestone: ---
Classification: Other
ImageMagick before version 7.1.0-47 is vulnerable to heap buffer overflow,
while processing a malformed TIFF file.
https://github.com/ImageMagick/ImageMagick6/commit/1aea203eb36409ce6903b9...
https://github.com/ImageMagick/ImageMagick/commit/30ccf9a0da1f47161b5935a...
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2126824
1 year, 6 months
[Bug 2124173] New: CVE-2021-20224 ImageMagick: integer overflow in ExportIndexQuantum() in MagickCore/quantum-export.c
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2124173
Bug ID: 2124173
Summary: CVE-2021-20224 ImageMagick: integer overflow in
ExportIndexQuantum() in MagickCore/quantum-export.c
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: trathi(a)redhat.com
CC: blaise(a)gmail.com, dcavalca(a)fb.com,
epel-packagers-sig(a)lists.fedoraproject.org,
fedora(a)famillecollet.com, luya_tfz(a)thefinalzone.net,
michel(a)michel-slm.name, ngompa13(a)gmail.com,
pampelmuse(a)gmx.at, sergio(a)serjux.com,
troy(a)troycurtisjr.com
Target Milestone: ---
Classification: Other
An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum()
function in MagickCore/quantum-export.c. Function calls to GetPixelIndex()
could result in values outside the range of representable for the 'unsigned
char'. When ImageMagick processes a crafted pdf file, this could lead to an
undefined behaviour or a crash.
https://github.com/ImageMagick/ImageMagick/commit/5af1dffa4b6ab984b5f13d1...
https://github.com/ImageMagick/ImageMagick/pull/3083
https://github.com/ImageMagick/ImageMagick6/commit/553054c1cb1e4e05ec8623...
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2124173
1 year, 6 months
[Bug 2124540] New: CVE-2021-3574 ImageMagick: memory leaks with convert command
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2124540
Bug ID: 2124540
Summary: CVE-2021-3574 ImageMagick: memory leaks with convert
command
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: trathi(a)redhat.com
CC: blaise(a)gmail.com, dcavalca(a)fb.com,
epel-packagers-sig(a)lists.fedoraproject.org,
fedora(a)famillecollet.com, jhorak(a)redhat.com,
luya_tfz(a)thefinalzone.net, michel(a)michel-slm.name,
ngompa13(a)gmail.com, pampelmuse(a)gmx.at,
sergio(a)serjux.com, troy(a)troycurtisjr.com
Target Milestone: ---
Classification: Other
A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted
file with the convert command, ASAN detects memory leaks.
https://github.com/ImageMagick/ImageMagick6/commit/cd7f9fb7751b0d59d5a74b...
https://github.com/ImageMagick/ImageMagick/commit/c6ad94fbb7b280f39c2fbbd...
https://github.com/ImageMagick/ImageMagick/issues/3540
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2124540
1 year, 6 months