Login
Login-Name Passwort


 
Newsletter
Werbung

Sicherheit: Denial of Service in libjpeg
Aktuelle Meldungen Distributionen
Name: Denial of Service in libjpeg
ID: MDVSA-2015:152
Distribution: Mandriva
Plattformen: Mandriva Business Server 2.0
Datum: So, 29. März 2015, 22:30
Referenzen: http://advisories.mageia.org/MGASA-2014-0544.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9092

Originalnachricht

This is a multi-part message in MIME format...

------------=_1427641402-10360-52

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2015:152
http://www.mandriva.com/en/support/security/
_______________________________________________________________________

Package : libjpeg
Date : March 29, 2015
Affected: Business Server 2.0
_______________________________________________________________________

Problem Description:

Updated libjpeg packages fix security vulnerability:

Passing a specially crafted jpeg file to libjpeg-turbo could lead to
stack smashing (CVE-2014-9092).
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9092
http://advisories.mageia.org/MGASA-2014-0544.html
_______________________________________________________________________

Updated Packages:

Mandriva Business Server 2/X86_64:
cfffdbee5761ab15865e348aeb9106c3
mbs2/x86_64/jpeg-progs-1.3.0-4.1.mbs2.x86_64.rpm
5d9c92c4d3283dd7c9ac8767d1b6f0fe
mbs2/x86_64/lib64jpeg62-1.3.0-4.1.mbs2.x86_64.rpm
b77a09a4ddab360e7b76d504f9ecd6d1
mbs2/x86_64/lib64jpeg8-1.3.0-4.1.mbs2.x86_64.rpm
b3ad83f5e4812df3b5c2f7c2d95a26a6
mbs2/x86_64/lib64jpeg-devel-1.3.0-4.1.mbs2.x86_64.rpm
8ddcb38951b9806f0c8e84e6671832f9
mbs2/x86_64/lib64jpeg-static-devel-1.3.0-4.1.mbs2.x86_64.rpm
d024365e4a492b864ece2e068cb9cced
mbs2/x86_64/lib64turbojpeg0-1.3.0-4.1.mbs2.x86_64.rpm
b2b32c2a19f9ab5c585c237808ba03b2 mbs2/SRPMS/libjpeg-1.3.0-4.1.mbs2.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/en/support/security/advisories/

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFVGAS3mqjQ0CJFipgRAgXtAJoDQ+3EwyHzVwF9yALa+cahu8yl/ACguui6
/7Y1PLb5IvFEQRHyfUZoS2Y=
=lZtW
-----END PGP SIGNATURE-----


------------=_1427641402-10360-52
Content-Type: text/plain; charset="UTF-8";
name="message-footer.txt"
Content-Disposition: inline; filename="message-footer.txt"
Content-Transfer-Encoding: 8bit

To unsubscribe, send a email to sympa@mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva?
Go to http://store.mandriva.com
_______________________________________________________


------------=_1427641402-10360-52--
Pro-Linux
Traut euch!
Neue Nachrichten
Werbung