Source: golang-golang-x-image X-Debbugs-CC: t...@security.debian.org Severity: important Tags: security
Hi, The following vulnerability was published for golang-golang-x-image. CVE-2024-24792[0]: | Parsing a corrupt or malicious image with invalid color indices can | cause a panic. https://github.com/advisories/GHSA-9phm-fm57-rhg8 https://github.com/golang/go/issues/67624 https://go-review.googlesource.com/c/image/+/588115 If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2024-24792 https://www.cve.org/CVERecord?id=CVE-2024-24792 Please adjust the affected versions in the BTS as needed.
