Fedora alert FEDORA-2026-63ab4e8283 (perl-Imager)
| From: | updates--- via package-announce <package-announce@lists.fedoraproject.org> | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 44 Update: perl-Imager-1.031-1.fc44 | |
| Date: | Thu, 28 May 2026 01:13:30 +0000 | |
| Message-ID: | <20260528011330.786396DC5C@bastion01.rdu3.fedoraproject.org> | |
| Archive-link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-63ab4e8283 2026-05-28 01:11:32.543832+00:00 -------------------------------------------------------------------------------- Name : perl-Imager Product : Fedora 44 Version : 1.031 Release : 1.fc44 URL : https://metacpan.org/release/Imager Summary : Perl extension for Generating 24 bit Images Description : Imager is a module for creating and altering images. It can read and write various image formats, draw primitive shapes like lines,and polygons, blend multiple images together in various ways, scale, crop, render text and more. -------------------------------------------------------------------------------- Update Information: Imager 1.031 - GIF: fix a heap buffer overflow with attacker controlled data CVE-2026-8454 Imager 1.030 - addtag(): store non-"int" numbers as strings - addtag: improve the regexp used to decide if a value can be stored as an int. - API: i_tags_get_int() - now fails if the value is stored as a string and is out of range for an int. -------------------------------------------------------------------------------- ChangeLog: * Tue May 19 2026 Jitka Plesnikova <jplesnik@redhat.com> - 1.031-1 - 1.031 bump (rhbz#2477776) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2477776 - perl-Imager-1.031 is available https://bugzilla.redhat.com/show_bug.cgi?id=2477776 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-63ab4e8283' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond... List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-ann... Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new