Summary
AutoTrace is a program for converting bitmaps to vector graphics.
Security Fix(es):
* autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact (CVE-2019-19005)
* autotrace: integer overflow in input-bmp.c (CVE-2019-19004)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | autotrace | 0.31.1-53.el8 |
Vulnerabilities 2
-
Unscored —
A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input …
-
Unscored —
A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitm…