Advisories » MGASA-2017-0280

Updated potrace packages fix security vulnerability

Publication date: 19 Aug 2017
Modification date: 19 Aug 2017
Type: security
Affected Mageia releases : 5 , 6
CVE: CVE-2017-12067

Description

Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic
function in mkbitmap.c (CVE-2017-12067).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=21515
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/PG4MCYIFDHYLJGKJFKDL3GEYN52V5EOM/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12067

SRPMS

5/core

• potrace-1.15-1.mga5

6/core

• potrace-1.15-1.mga6