LibRaw security update

An update is available for LibRaw. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list LibRaw is a library for reading RAW files obtained from digital photo cameras...

Free Lossless Image Format Buffer Overflow Vulnerability

Free Lossless Image Format FLIF is a lossless image format. A buffer overflow vulnerability exists in imagesavepng in the image/image-png.cpp file in FLIF version 0.3. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...

Free Lossless Image Format Denial of Service Vulnerability (CNVD-2018-11452)

Free Lossless Image Format FLIF is a lossless image format based on MANIAC compression. A security vulnerability exists in the 'TransformPaletteC::process' function in the transform/paletteC.hpp file in FLIF version 0.3. A remote attacker can exploit this vulnerability to cause a denial of servic...

Free Lossless Image Format (FLIF) Long Loop Vulnerability

FLIF is a lossless image format based on MANIAC compression. A long loop vulnerability exists in imageloadpnm in image/image-pnm.cpp in Free Lossless Image Format FLIF version 0.3. An attacker can exploit this vulnerability to cause resource exhaustion...

Lepton parent parameter SQL injection vulnerability

Lepton is a set of tools for lossless compression of JPEG format files. A SQL injection vulnerability exists in the Lepton parent parameter, which could allow an attacker to take control of the application, access or modify data, or exploit a potential vulnerability in the underlying database...

Lepton Open Redirect Vulnerability

Lepton is a set of tools for lossless compression of JPEG format files. Lepton suffers from an open redirection vulnerability that can be exploited by an attacker to redirect a user to an arbitrary website to conduct a phishing attack...

Lepton memory corruption vulnerability (CNVD-2016-05182)

Lepton is a set of tools for lossless compression of JPEG format files. A memory corruption vulnerability exists in Lepton, which can be exploited by attackers to obtain sensitive information and cause a denial of service...