libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfault when attempting to parse a malformed UTF-8 character. Users should upgrade to libvips version 8.14.4 (or later) when processing untrusted input.
{ "binaries": [ { "binary_name": "gir1.2-vips-8.0", "binary_version": "8.12.1-1ubuntu0.1~esm1" }, { "binary_name": "libvips-dev", "binary_version": "8.12.1-1ubuntu0.1~esm1" }, { "binary_name": "libvips-doc", "binary_version": "8.12.1-1ubuntu0.1~esm1" }, { "binary_name": "libvips-tools", "binary_version": "8.12.1-1ubuntu0.1~esm1" }, { "binary_name": "libvips-tools-dbgsym", "binary_version": "8.12.1-1ubuntu0.1~esm1" }, { "binary_name": "libvips42", "binary_version": "8.12.1-1ubuntu0.1~esm1" }, { "binary_name": "libvips42-dbgsym", "binary_version": "8.12.1-1ubuntu0.1~esm1" } ], "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }