CVE:CVE-2020-20739
CNNVD:CNNVD-202011-1766
libvips是一款开源的2D图像处理库。
libvips 中的im_vips2dz 8.8.2 之前版本存在安全漏洞，该漏洞源于有一个未初始化的变量，可能会导致远程服务器路径或堆栈地址泄漏。
solution:Upgrade libvips_project libvips to a higher version than 8.8.2,and avoid the version (,8.8.2); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 32,and avoid the version 32