Skip to content
OpenAdvisories
Medium ALSA-2023:3067 1 CVE

Moderate: autotrace security update

Published May 16, 2023 · Updated Oct 29, 2026

Summary

AutoTrace is a program for converting bitmaps to vector graphics.

Security Fix(es):

* autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c (CVE-2022-32323)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 1

ReleasePackageFixed in
AlmaLinux · 8 autotrace 0.31.1-55.el8

Vulnerabilities 1

  • Unscored —

    AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660.

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-32323
  • report
    https://bugzilla.redhat.com/2107471
  • advisory
    https://errata.almalinux.org/8/ALSA-2023-3067.html