libcaca: Arbitary Code Execution A vulnerability has been discovered in libcaca which can lead to arbitrary code execution. libcaca 2024-02-18 2024-02-18 772317 remote 0.99_beta19-r4 0.99_beta19-r4

libcaca is a library that creates colored ASCII-art graphics.

A vulnerability has been discovered in libcaca. Please review the CVE identifier referenced below for details.

A buffer overflow issue in caca_resize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context.

There is no known workaround at this time.

All libcaca users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libcaca-0.99_beta19-r4"
CVE-2021-3410 graaff graaff