@htmlacademy/autocheck (>=1.5.0 <=1.5.4), @htmlacademy/courses-task-checks (>=1.0.10-14 <=1.1.38) +16 more potentially affected by CVE-2020-28248 via png-img (>=0.2.1 <=2.3.0)

png-img NPM version =0.2.1, =1.5.0, =1.0.10-14, =1.0.1, =1.0.0, =1.10.1, =4.0.0, =0.0.1, =0.9.0, =2.2.0, =0.7.0, =1.0.11, =0.79.5, =0.1.0, =0.0.1, =0.0.18 and more Source cves: CVE-2020-28248 Source advisory: OSV:GHSA-Q5WR-FVPQ-P67G...

Vulnerabilities fixed in Autodesk products

Vulnerabilities have been fixed in several Autodesk products. The vulnerabilities potentially allow a malicious person to execute code under the application's permissions. To exploit requires a malicious party to trick a user into opening a rogue file open. The vulnerabilities are in two modules...

[SECURITY] Fedora 34 Update: vips-8.11.3-1.fc34.1

VIPS is an image processing library. It is good for very large images even larger than the amount of RAM in your machine, and for working with color. This package should be installed if you want to use a program compiled against VIPS...

[SECURITY] Fedora 34 Update: R-magick-2.7.3-2.fc34

Bindings to 'ImageMagick': the most comprehensive open-source image processing library available. Supports many common formats png, jpeg, tiff, pdf, etc and manipulations rotate, scale, crop, trim, flip, blur, etc. All operations are vectorized via the Magick++ STL meaning they operate either on ...

Fedora: Security Advisory for vips (FEDORA-2021-b58af96f33)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Aom 缓冲区错误漏洞

Aom is a next-generation open-source digital media technology for everyone, organized by the Alliance For Open Media AOM. A security vulnerability exists in AOM version 2.0.1, which stems from a stack buffer overflow in the component src/aomimage.c. The vulnerability is caused by the presence of ...

Fedora: Security Advisory for R-magick (FEDORA-2021-df1fa3d3e0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 35 Update: vips-8.11.3-6.fc35

VIPS is an image processing library. It is good for very large images even larger than the amount of RAM in your machine, and for working with color. This package should be installed if you want to use a program compiled against VIPS...

[SECURITY] Fedora 35 Update: R-magick-2.7.3-2.fc35

Bindings to 'ImageMagick': the most comprehensive open-source image processing library available. Supports many common formats png, jpeg, tiff, pdf, etc and manipulations rotate, scale, crop, trim, flip, blur, etc. All operations are vectorized via the Magick++ STL meaning they operate either on ...

Mozilla Firefox Security Advisory (MFSA2014-08) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Mozilla Firefox Security Advisory (MFSA2013-116) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Overflow/crash in `tf.image.resize` when size is large

Impact If tf.image.resize is called with a large input argument then the TensorFlow process will crash due to a CHECK-failure caused by an overflow. python import tensorflow as tf import numpy as np tf.keras.layers.UpSampling2D size=1610637938, dataformat='channelsfirst',...

Moderate: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

RLSA-2021:4149 Moderate: python-pillow security update

The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fixes: python-pillow: Out-of-bounds read in J2K image reader CVE-2021-25287 python-pillow:...

python-pillow security update

An update is available for python-pillow. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The python-pillow packages contain a Python image processing library th...

Moderate: python-pillow security update

The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fixes: python-pillow: Out-of-bounds read in J2K image reader CVE-2021-25287 python-pillow:...

CVE-2021-39907

Removed by vendor...

CVE-2021-39907

CVE-2021-39907 affects GitLab CE/EE starting with version 13.7. The issue arises from stripping EXIF data from certain images, which can cause high CPU usage and potential denial of service. The connected documents corroborate the baseline description across multiple sources (GitLab CVE entry, OS...

PT-2021-22754 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.7 and later Description: A potential DOS issue was discovered in GitLab CE/EE. The stripping of EXIF data from certain images resulted in high CPU usage. Recommendations: For GitLab CE/EE versions 13.7 and later,...

Image-Processing Resource Management Error Vulnerability

Image-Processing is an image processing code repository that uses C. abhijitnathwani image-processing v0.1.0 contains a security vulnerability that stems from a problem with how the software handles image file sizes, which could be exploited by an attacker to cause a denial of service via a craft...