Headline

RHSA-2023:3067: Red Hat Security Advisory: autotrace security update

An update for autotrace is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-32323: A buffer overflow flaw was found in the autotrace package. This flaw allows an attacker to trick the user into opening a maliciously crafted BMP image, triggering arbitrary code execution or causing the application to crash.

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #web #linux #red_hat #nodejs #js #java #kubernetes #aws #buffer_overflow #ibm

Skip to navigation Skip to main content

Utilities

Subscriptions
Downloads
Containers
Support Cases

Infrastructure and Management

Red Hat Enterprise Linux
Red Hat Virtualization
Red Hat Identity Management
Red Hat Directory Server
Red Hat Certificate System
Red Hat Satellite
Red Hat Subscription Management
Red Hat Update Infrastructure
Red Hat Insights
Red Hat Ansible Automation Platform

Cloud Computing

Red Hat OpenShift
Red Hat CloudForms
Red Hat OpenStack Platform
Red Hat OpenShift Container Platform
Red Hat OpenShift Data Science
Red Hat OpenShift Online
Red Hat OpenShift Dedicated
Red Hat Advanced Cluster Security for Kubernetes
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Quay
Red Hat CodeReady Workspaces
Red Hat OpenShift Service on AWS

Storage

Red Hat Gluster Storage
Red Hat Hyperconverged Infrastructure
Red Hat Ceph Storage
Red Hat OpenShift Data Foundation

Runtimes

Red Hat Runtimes
Red Hat JBoss Enterprise Application Platform
Red Hat Data Grid
Red Hat JBoss Web Server
Red Hat Single Sign On
Red Hat support for Spring Boot
Red Hat build of Node.js
Red Hat build of Thorntail
Red Hat build of Eclipse Vert.x
Red Hat build of OpenJDK
Red Hat build of Quarkus

Integration and Automation

Red Hat Process Automation
Red Hat Process Automation Manager
Red Hat Decision Manager

All Products

Issued:

2023-05-16

Updated:

2023-05-16

RHSA-2023:3067 - Security Advisory

Overview
Updated Packages

Synopsis

Moderate: autotrace security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for autotrace is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

AutoTrace is a program for converting bitmaps to vector graphics.

Security Fix(es):

autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c (CVE-2022-32323)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.

Affected Products

Red Hat CodeReady Linux Builder for x86_64 8 x86_64
Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
Red Hat CodeReady Linux Builder for IBM z Systems 8 s390x

Fixes

BZ - 2107471 - CVE-2022-32323 autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c

References

https://access.redhat.com/security/updates/classification/#moderate
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index

Red Hat CodeReady Linux Builder for x86_64 8

SRPM

autotrace-0.31.1-55.el8.src.rpm

SHA-256: 055164650e3566f34a4876af96918fd628ab7e86b9ae4cf9e13ffad0bf7ad7d1

x86_64

autotrace-0.31.1-55.el8.i686.rpm

SHA-256: d439c98a60d2fdcb9739f1a768b6bf6419e1f09eb3419209d43bf8dc5d78428b

autotrace-0.31.1-55.el8.x86_64.rpm

SHA-256: 29e46b08d41fb686619fd177ba4b45d67e3534c50316872cc4e29bb4cca2db22

autotrace-debuginfo-0.31.1-55.el8.i686.rpm

SHA-256: 032e0baefad475083b8f87c3b428d81526c27c744c863ae2c31dc7a60b99cef3

autotrace-debuginfo-0.31.1-55.el8.x86_64.rpm

SHA-256: c8a537da2b569f70c7493539f62834d32826a59de8685f8770a9d19d7e71c8c2

autotrace-debugsource-0.31.1-55.el8.i686.rpm

SHA-256: 0623c3b2038bd6368f1c44942c0d15d1ba31d83999ab5ae1644b7798e4ded76c

autotrace-debugsource-0.31.1-55.el8.x86_64.rpm

SHA-256: 3acadd8af57e89ea31e7db74d85dd00fbf53a3d701af2b0b13553e2871027825

Red Hat CodeReady Linux Builder for Power, little endian 8

SRPM

autotrace-0.31.1-55.el8.src.rpm

SHA-256: 055164650e3566f34a4876af96918fd628ab7e86b9ae4cf9e13ffad0bf7ad7d1

ppc64le

autotrace-0.31.1-55.el8.ppc64le.rpm

SHA-256: d452816de5f4b1870cb2d203e8ccd23a8656d2c67aa74d047922bebbaec915a8

autotrace-debuginfo-0.31.1-55.el8.ppc64le.rpm

SHA-256: 0d4432a5a20063fbbe3930f3d4fb3cd1e03774087c37d7cde87ac0abf4aff853

autotrace-debugsource-0.31.1-55.el8.ppc64le.rpm

SHA-256: 5fd6f51838cd073c8d059f855745a66ecbd6cbcee4aa6099041ee29015ab80af

Red Hat CodeReady Linux Builder for ARM 64 8

SRPM

autotrace-0.31.1-55.el8.src.rpm

SHA-256: 055164650e3566f34a4876af96918fd628ab7e86b9ae4cf9e13ffad0bf7ad7d1

aarch64

autotrace-0.31.1-55.el8.aarch64.rpm

SHA-256: 3760b55981e08d27e1ecdeb3210df311769f258b7a1e815e55ba0a37d44f51c7

autotrace-debuginfo-0.31.1-55.el8.aarch64.rpm

SHA-256: d1dd289fcd0f8ba8c3fd16de8fc550e7f51647d755495ac9037b88adee84982a

autotrace-debugsource-0.31.1-55.el8.aarch64.rpm

SHA-256: 02c383d7b2bac5a1fb22c46b15fbb22f7b86e80cbea6d8f70e8536cd9fd57820

Red Hat CodeReady Linux Builder for IBM z Systems 8

SRPM

autotrace-0.31.1-55.el8.src.rpm

SHA-256: 055164650e3566f34a4876af96918fd628ab7e86b9ae4cf9e13ffad0bf7ad7d1

s390x

autotrace-0.31.1-55.el8.s390x.rpm

SHA-256: bc41b98d0cac92d36804506df02a4c466a6c2667d0a6c1092470c95d470c4e6e

autotrace-debuginfo-0.31.1-55.el8.s390x.rpm

SHA-256: 6d6c961efd9b9e373bbb676ba3a0a88de269f3bdb1125b07b35335beaab07f3c

autotrace-debugsource-0.31.1-55.el8.s390x.rpm

SHA-256: aa0d5af9a3288084277933537f816ab77a394f9c9e13384b4fe803ebca79501b

The Red Hat security contact is [email protected]. More contact details at https://access.redhat.com/security/team/contact/.

Related news

Red Hat Security Advisory 2023-3067-01

Red Hat Security Advisory 2023-3067-01 - AutoTrace is a program for converting bitmaps to vector graphics. Issues addressed include a buffer overflow vulnerability.

1 year ago

Packet Storm

Open in Source

#vulnerability #linux #red_hat #js #buffer_overflow

RHSA-2023:2589: Red Hat Security Advisory: autotrace security update

An update for autotrace is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-32323: A buffer overflow flaw was found in the autotrace package. This flaw allows an attacker to trick the user into opening a maliciously crafted BMP image, triggering arbitrary code execution or causing the application to crash.

1 year ago

Red Hat Security Data

Open in Source