USN-6353-1: PLIB vulnerability
7 September 2023
PLIB could be made to execute arbitrary code if it opens a specially crafted TGA file.
- plib - Portability Libraries: Development package
Wooseok Kang discovered that PLIB did not properly manage memory under
certain circumstances. If a user were tricked into opening a specially
crafted TGA file, an attacker could possibly use this issue to cause
applications using PLIB to crash, resulting in a denial of service, or
possibly execute arbitrary code.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.