Imager 0.40
- Released by
- ADDI
- Version
- Release Date
- 2002-04-12
- Kwalitee
- 131.25
- Core Kwalitee
- 87.5
- LINKS
Imager 0.40
Security Advisories
CVE-2016-1238
Imager would search the default current directory entry in @INC when searching for file format support modules.
- http://www.nntp.perl.org/group/perl.perl5.porters/2016/07/msg238271.html
- http://www.securitytracker.com/id/1036440
- http://perl5.git.perl.org/perl.git/commit/cee96d52c39b1e7b36e1c62d38bcd8d86e9a41ab
- https://rt.perl.org/Public/Bug/Display.html?id=127834
- http://www.securityfocus.com/bid/92136
- http://www.debian.org/security/2016/dsa-3628
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DOFRQWJRP2NQJEYEWOMECVW3HAMD5SYN/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZBNQH3DMI7HDELJAZ4TFJJANHXOEDWH/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2FBQOCV3GBAN2EYZUM3CFDJ4ECA3GZOK/
- https://security.gentoo.org/glsa/201701-75
- https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c@%3Cannounce.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2018/11/msg00016.html
- https://security.gentoo.org/glsa/201812-07
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html
Fixed version: >=1.006
Severity: high
Reported: 2016-08-02
CVE-2007-2459
Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted 8-bit/pixel compressed BMP files.
- http://imager.perl.org/a/65.html
- http://rt.cpan.org/Public/Bug/Display.html?id=26811
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=421582
- http://www.debian.org/security/2008/dsa-1498
- http://www.securityfocus.com/bid/23711
- http://secunia.com/advisories/25038
- http://secunia.com/advisories/28868
- http://osvdb.org/39846
- http://www.vupen.com/english/advisories/2007/1587
- http://osvdb.org/35470
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34010
Fixed version: >=0.57
Reported: 2007-05-02
When drawing on an image with an alpha channel where the source minimum is greater than zero, Imager would read from beyond the end of a malloc() allocated buffer. In rare circumstances this could lead to some of the source image not being written to the target image, or possibly to a segmentation fault.
Fixed version: >=0.98
Reported: 2014-01-03
Kwalitee Issues
- has_meta_yml
-
Add a META.yml to the distribution. Your buildtool should be able to autogenerate it.
- has_human_readable_license
-
Add a section called "LICENSE" to the documentation, or add a file named LICENSE to the distribution.
- has_license_in_source_file
-
Add =head1 LICENSE and the text of the license to the main module in your code.
- no_pod_errors
-
Remove the POD errors. You can check for POD errors automatically by including Test::Pod to your test suite.
Error: Imager-0.40/lib/Imager/Draw.pod -- Around line 183: You forgot a '=back' before '=head1' Around line 188: =back without =over Imager-0.40/lib/Imager/ImageTypes.pod -- Around line 322: You forgot a '=back' before '=head2'
- has_meta_json
-
Add a META.json to the distribution. Your buildtool should be able to autogenerate it.
- no_stdin_for_prompting
-
Use the prompt() method from ExtUtils::MakeMaker/Module::Build.
- meta_yml_has_license
-
Define the license if you are using in Build.PL. If you are using MakeMaker (Makefile.PL) you should upgrade to ExtUtils::MakeMaker version 6.31.
- has_known_license_in_source_file
-
Add =head1 LICENSE and/or the proper text of the well-known license to the main module in your code.
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: Imager, Imager::Color, Imager::Color::Float, Imager::Expr, Imager::Expr::Assem, Imager::Fill, Imager::Font, Imager::Font::FreeType2, Imager::Font::Truetype, Imager::Font::Type1, Imager::Font::Win32, Imager::Fountain, Imager::Matrix2d, Imager::Regops, Imager::Transform
- has_separate_license_file
-
This is not a critical issue. Currently mainly informative for the CPANTS authors. It might be removed later.
Modules
| Name | Abstract | Version | View |
|---|---|---|---|
| Imager | Perl extension for Generating 24 bit Images | 0.40 | metacpan |
| Imager::Color | Color handling for Imager. | metacpan | |
| Imager::Color::Float | Rough floating point sample colour handling | metacpan | |
| Imager::Expr | implements expression parsing and compilation for the expression evaluation engine used by Imager::transform2() | metacpan | |
| Imager::Expr::Assem | an assembler for producing code for the Imager register machine | metacpan | |
| Imager::Fill | general fill types | metacpan | |
| Imager::Font | Font handling for Imager. | metacpan | |
| Imager::Font::FreeType2 | low-level functions for FreeType2 text output | metacpan | |
| Imager::Font::Truetype | low-level functions for Truetype fonts | metacpan | |
| Imager::Font::Type1 | low-level functions for Type1 fonts | metacpan | |
| Imager::Font::Win32 | uses Win32 GDI services for text output | metacpan | |
| Imager::Fountain | a class for building fountain fills suitable for use by the fountain filter. | metacpan | |
| Imager::Matrix2d | simple wrapper for matrix construction | metacpan | |
| Imager::Regops | generated information about the register based VM | metacpan | |
| Imager::Transform | a library of register machine image transformations | metacpan |