Information on source package imlib2

Available versions

ReleaseVersion
buster1.5.1-1
bullseye1.7.1-2
bookworm1.10.0-4+deb12u1
trixie1.12.1-1
sid1.12.1-1.1

Open issues

BugbusterbullseyebookwormtrixiesidDescription
CVE-2024-25450fixedvulnerable (no DSA)fixedfixedfixedimlib2 v1.9.1 was discovered to mishandle memory allocation in the fun ...
CVE-2024-25448fixedvulnerable (no DSA)fixedfixedfixedAn issue in the imlib_free_image_and_decache function of imlib2 v1.9.1 ...
CVE-2024-25447fixedvulnerable (no DSA)fixedfixedfixedAn issue in the imlib_load_image_with_error_return function of imlib2 ...

Resolved issues

BugDescription
CVE-2020-12761modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow ( ...
CVE-2016-4024Integer overflow in imlib2 before 1.4.9 on 32-bit platforms allows rem ...
CVE-2016-3994The GIF loader in imlib2 before 1.4.9 allows remote attackers to cause ...
CVE-2016-3993Off-by-one error in the __imlib_MergeUpdate function in lib/updates.c ...
CVE-2014-9771Integer overflow in imlib2 before 1.4.7 allows remote attackers to cau ...
CVE-2014-9764imlib2 before 1.4.7 allows remote attackers to cause a denial of servi ...
CVE-2014-9763imlib2 before 1.4.7 allows remote attackers to cause a denial of servi ...
CVE-2014-9762imlib2 before 1.4.7 allows remote attackers to cause a denial of servi ...
CVE-2011-5326imlib2 before 1.4.9 allows remote attackers to cause a denial of servi ...
CVE-2010-0991Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dep ...
CVE-2008-6079imlib2 before 1.4.2 allows context-dependent attackers to have an unsp ...
CVE-2008-5187The load function in the XPM loader for imlib2 1.4.2, and possibly oth ...
CVE-2008-2426Multiple stack-based buffer overflows in Imlib 2 (aka imlib2) 1.4.0 al ...
CVE-2006-4809Stack-based buffer overflow in loader_pnm.c in imlib2 before 1.2.1, an ...
CVE-2006-4808Heap-based buffer overflow in loader_tga.c in imlib2 before 1.2.1, and ...
CVE-2006-4807loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allo ...
CVE-2006-4806Multiple integer overflows in imlib2 allow user-assisted remote attack ...
CVE-2004-1026Multiple integer overflows in the image handler for imlib 1.9.14 and e ...
CVE-2004-0802Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote ...

Security announcements

DSA / DLADescription
DSA-3555-1imlib2 - security update
DSA-3537-1imlib2 - security update
DLA-401-1imlib2 - security update
DSA-2029-1imlib2 - arbitrary code execution
DSA-1672-1imlib2 - arbitrary code execution
DSA-1594-1imlib2
DSA-628-1imlib2 - integer overflows
DSA-552-1imlib2 - unsanitised input

Search for package or bug name: Reporting problems