BSD PortsVulnerable: version 0.9.5 is affected by 10 known vulnerabilities. See below.
wip/libbpg 0.9.5 NetBSD
Library for BGP (Better Portable Graphics)
- System
- NetBSD
- Repository
- pkgsrc-wip
- Maintainer
- [email protected]
- License
- gnu-gpl-v2 AND gnu-lgpl-v2.1
- Categories
- wip, graphics
Description
BPG (Better Portable Graphics) is a new image format. Its purpose is to replace the JPEG image format when quality or file size is an issue. Its main advantages are:
* High compression ratio. Files are much smaller than JPEG for similar quality. * Supported by most Web browsers with a small Javascript decoder * Based on a subset of the HEVC open video compression standard. * Supports the same chroma formats as JPEG (grayscale, YCbCr 4:2:0, 4:2:2, 4:4:4) to reduce the losses during the conversion. An alpha channel is supported. The RGB, YCgCo and CMYK color spaces are also supported. * Native support of 8 to 14 bits per channel for a higher dynamic range. * Lossless compression is supported. * Various metadata (such as EXIF, ICC profile, XMP) can be included.
In the other systems
| System | Port | Version |
|---|---|---|
| NetBSD | wip/libbpg | 0.9.5 |
| FreeBSD | graphics/libbpg | 0.9.8_6 |
| DragonFly | graphics/libbpg | 0.9.8_3 |
| HardenedBSD | graphics/libbpg | 0.9.8_4 |
| GhostBSD | graphics/libbpg | 0.9.8_4 |
Install
From pkgsrc-wip (no binary package):
cd /usr/pkgsrc/wip/libbpg && make install cleanDependencies
Run dependencies 3
No port depends on this one.
Known vulnerabilities 10
- libbpg: out-of-bounds-write (CVE-2016-8710)
- libbpg: null-dereference (CVE-2017-13135)
- libbpg: integer-overflow (CVE-2017-13136)
- libbpg: denial-of-service (CVE-2017-14034)
- libbpg: heap-overflow (CVE-2017-14734)
- libbpg: denial-of-service (CVE-2017-14795)
- libbpg: denial-of-service (CVE-2017-14796)
- libbpg: null-pointer-dereference (CVE-2017-2575)
- libbpg: integer-overflow (CVE-2018-12447)
- libbpg: out-of-bounds-write (CVE-2016-5637)