3 matches found
Updated perl-Imager package fixes security vulnerabilities
The updated package fixes security vulnerabilities: The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim method is called on a crafted input image. CVE-2024-53901 Imager versions before 1.032 fo...
Fedora 44 : perl-Imager (2026-adbe03cd7a)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-adbe03cd7a advisory. 1.032 bump- Fix CVE-2026-13708 and CVE-2026-13705 Tenable has extracted the preceding description block directly from the Fedora security advisory...
UBUNTU-CVE-2026-13708
Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in ireadjpegwiol. ireadjpegwiol walks the marker list libjpeg returns and, for each APP13 marker, allocates a new buffer with iptcitext = mymalloc... and overwrites the previous...