DSA-5579-1 freeimage -- security update

Related Vulnerabilities: CVE-2020-21427   CVE-2020-21428   CVE-2020-22524  

Multiple vulnerabilities were discovered in FreeImage, a support library for graphics image formats, which could result in the execution of arbitrary code if malformed image files are processed. For the oldstable distribution (bullseye), these problems have been fixed in version 3.18.0+ds2-6+deb11u1. For the stable distribution (bookworm), these problems have been fixed in version 3.18.0+ds2-9+deb12u1. We recommend that you upgrade your freeimage packages. For the detailed security status of freeimage please refer to its security tracker page at: https://security-tracker.debian.org/tracker/freeimage

Debian Security Advisory

DSA-5579-1 freeimage -- security update

Date Reported:
17 Dec 2023
Affected Packages:
freeimage
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2020-21427, CVE-2020-21428, CVE-2020-22524.
More information:

Multiple vulnerabilities were discovered in FreeImage, a support library for graphics image formats, which could result in the execution of arbitrary code if malformed image files are processed.

For the oldstable distribution (bullseye), these problems have been fixed in version 3.18.0+ds2-6+deb11u1.

For the stable distribution (bookworm), these problems have been fixed in version 3.18.0+ds2-9+deb12u1.

We recommend that you upgrade your freeimage packages.

For the detailed security status of freeimage please refer to its security tracker page at: https://security-tracker.debian.org/tracker/freeimage