Fedora Linux 8579 Published by

A mingw-freeimage security update has been released for Fedora 38.



[SECURITY] Fedora 38 Update: mingw-freeimage-3.19.0-0.16.svn1909.fc38


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-a8b26b910d
2023-09-06 01:18:36.084235
--------------------------------------------------------------------------------

Name : mingw-freeimage
Product : Fedora 38
Version : 3.19.0
Release : 0.16.svn1909.fc38
URL : http://freeimage.sourceforge.net/
Summary : MinGW Windows freeimage library
Description :
MinGW Windows freeimage library.

--------------------------------------------------------------------------------
Update Information:

Update to latest svn revision.
--------------------------------------------------------------------------------
ChangeLog:

* Mon Aug 28 2023 Sandro Mani [manisandro@gmail.com] - 3.19.0-0.16.svn1889
- Update to r1909
* Thu Jul 20 2023 Fedora Release Engineering [releng@fedoraproject.org] - 3.19.0-0.15.svn1889
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2235358 - CVE-2020-22524 freeimage: buffer overflow in FreeImage_Load() in Plugin.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2235358
[ 2 ] Bug #2235359 - CVE-2020-22524 mingw-freeimage: freeimage: buffer overflow in FreeImage_Load() in Plugin.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2235359
[ 3 ] Bug #2235406 - CVE-2020-21426 mingw-freeimage: freeimage: buffer overflow in C_IStream::read() in PluginEXR.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2235406
[ 4 ] Bug #2235407 - CVE-2020-21426 freeimage: buffer overflow in C_IStream::read() in PluginEXR.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2235407
[ 5 ] Bug #2235412 - CVE-2020-21427 mingw-freeimage: freeimage: buffer overflow in LoadPixelDataRLE8() in PluginBMP.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2235412
[ 6 ] Bug #2235414 - CVE-2020-21427 freeimage: buffer overflow in LoadPixelDataRLE8() in PluginBMP.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2235414
[ 7 ] Bug #2235417 - CVE-2020-21428 freeimage: buffer overflow in LoadRGB() in PluginDDS.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2235417
[ 8 ] Bug #2235418 - CVE-2020-21428 mingw-freeimage: freeimage: buffer overflow in LoadRGB() in PluginDDS.cpp [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2235418
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-a8b26b910d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------