Ubuntu USN-8994-1 fixes nine libvips vulnerabilities in image processing
VULNERABILITYUbunturedteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Ubuntu notice USN-8994-1 covers nine libvips vulnerabilities, mostly integer overflows and improper validation when parsing PDF, TIFF, GIF, PPM, Radiance and EXIF data. Most could cause a crash and denial of service, some could expose sensitive information, and several could allow arbitrary code execution. Affected releases range from Ubuntu 16.04 LTS to 26.04 LTS depending on the flaw.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Apply the libvips package updates for your Ubuntu release as described in USN-8994-1.
- Prioritise hosts that process untrusted PDF, TIFF, GIF, PPM or EXIF images with libvips.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Ubuntu Security Notices
Who and what is in it
Products