HCE1-SA-2023-0051
An update for netpbm is now available for HCE 1.1
Moderate
HCE 1.1
Security Fix(es):
The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, as demonstrated by pbmmask. (CVE-2018-8975)
HCE 1.1
netpbm-10.79.00-8.hce1c.x86_64.rpm
netpbm-progs-10.79.00-8.hce1c.x86_64.rpm