Debian: Security Advisory (DSA-5915-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5915-1] vips security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5915-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 03, 2025 https://www.debian.org/security/faq -...

DSA-5915-1 vips - security update

Bulletin has no description...

Debian dsa-5915 : gir1.2-vips-8.0 - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5915 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5915-1 [email protected] https://www.debian.org/security/...

[SECURITY] [DLA 4148-1] vips security update

Debian LTS Advisory DLA-4148-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin April 30, 2025 https://wiki.debian.org/LTS Package : vips Version : 8.10.5-2+deb11u1 CVE ID : CVE-2025-29769 A heap-based buffer overflow was discovered in vips, an image processing...

Debian dla-4148 : gir1.2-vips-8.0 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4148 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4148-1 [email protected] https://www.debian.org/lts/security/...

DLA-4148-1 vips - security update

Bulletin has no description...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the heifsave operation which could incorrectly determine the presence of an alpha channel in an input when it was not possible to determine the colour interpretation, known internally within libvips as...

OSV-2025-131 Heap-buffer-overflow in vips_foreign_save_heif_write_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=396460413 Crash type: Heap-buffer-overflow WRITE Crash state: vipsforeignsaveheifwriteblock wbufferwritethread vipsthreadsetwork...

Fedora: Security Advisory (FEDORA-2024-791f8d9804)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-5c3c77b8eb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: vips-8.15.1-1.fc39

VIPS is an image processing library. It is good for very large images even larger than the amount of RAM in your machine, and for working with color. This package should be installed if you want to use a program compiled against VIPS...

Ubuntu: Security Advisory (USN-6437-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6437-1: VIPS vulnerabilities

Ziqiang Gu discovered that VIPS could be made to dereference a NULL pointer. If a user or automated system were tricked into processing a specially crafted input image file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubunt...

USN-6437-1 vips vulnerabilities

Ziqiang Gu discovered that VIPS could be made to dereference a NULL pointer. If a user or automated system were tricked into processing a specially crafted input image file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubunt...

Ubuntu 16.04 ESM / 18.04 ESM / 22.04 ESM : VIPS vulnerabilities (USN-6437-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6437-1 advisory. Ziqiang Gu discovered that VIPS could be made to dereference a NULL pointer. If a user or automated system were tricked into...

SUSE CVE-2010-3364

The vips-7.22 script in VIPS 7.22.2 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

SUSE CVE-2017-14684

In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service memory consumption in ResizeMagickMemory in MagickCore/memory.c via a crafted file...

The vulnerability of the vips_eye_point function in the eye.c component, and the vips_mask_point function in the mask.c component of the VIPS image processing library, allows a intruder to trigger a service failure.

The vulnerability of the vipseyepoint function in the eye.c component and the vipsmaskpoint function in the mask.c component of the VIPS image processing library is related to the lack of checks for division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failur...

PT-2022-36865

Name of the Vulnerable Software and Affected Versions vips affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the vips rect intersectrect function, specifically when calling vips foreign load pdf generate and vips region prepare to...