[SECURITY] [DLA 401-1] imlib2 security update

2016-01-2412:32:35

lists.debian.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.7 High

AI Score

Confidence

High

0.058 Low

EPSS

Percentile

93.4%

JSON

Package : imlib2
Version : 1.4.2-8+deb6u1
CVE ID : CVE-2014-9762 CVE-2014-9763 CVE-2014-9764

CVE-2014-9762
GIF loader: Fix segv on images without colormap

CVE-2014-9763
Prevent division-by-zero crashes

CVE-2014-9764
Fix segfault when opening input/queue/id:000007,src:000000,op:flip1,pos:51 with feh

OSVersionArchitecturePackageVersionFilename
Debian7mipslibimlib2-dev< 1.4.5-1+deb7u1libimlib2-dev_1.4.5-1+deb7u1_mips.deb
Debian8mipsellibimlib2< 1.4.6-2+deb8u1libimlib2_1.4.6-2+deb8u1_mipsel.deb
Debian8s390xlibimlib2-dev< 1.4.6-2+deb8u1libimlib2-dev_1.4.6-2+deb8u1_s390x.deb
Debian8armhflibimlib2< 1.4.6-2+deb8u1libimlib2_1.4.6-2+deb8u1_armhf.deb
Debian8amd64libimlib2< 1.4.6-2+deb8u1libimlib2_1.4.6-2+deb8u1_amd64.deb
Debian8armellibimlib2-dev< 1.4.6-2+deb8u1libimlib2-dev_1.4.6-2+deb8u1_armel.deb
Debian8ppc64ellibimlib2-dev< 1.4.6-2+deb8u1libimlib2-dev_1.4.6-2+deb8u1_ppc64el.deb
Debian8amd64libimlib2-dev< 1.4.6-2+deb8u1libimlib2-dev_1.4.6-2+deb8u1_amd64.deb
Debian8arm64libimlib2-dev< 1.4.6-2+deb8u1libimlib2-dev_1.4.6-2+deb8u1_arm64.deb
Debian7kfreebsd-amd64libimlib2-dev< 1.4.5-1+deb7u1libimlib2-dev_1.4.5-1+deb7u1_kfreebsd-amd64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	mips	libimlib2-dev	< 1.4.5-1+deb7u1	libimlib2-dev_1.4.5-1+deb7u1_mips.deb
Debian	8	mipsel	libimlib2	< 1.4.6-2+deb8u1	libimlib2_1.4.6-2+deb8u1_mipsel.deb
Debian	8	s390x	libimlib2-dev	< 1.4.6-2+deb8u1	libimlib2-dev_1.4.6-2+deb8u1_s390x.deb
Debian	8	armhf	libimlib2	< 1.4.6-2+deb8u1	libimlib2_1.4.6-2+deb8u1_armhf.deb
Debian	8	amd64	libimlib2	< 1.4.6-2+deb8u1	libimlib2_1.4.6-2+deb8u1_amd64.deb
Debian	8	armel	libimlib2-dev	< 1.4.6-2+deb8u1	libimlib2-dev_1.4.6-2+deb8u1_armel.deb
Debian	8	ppc64el	libimlib2-dev	< 1.4.6-2+deb8u1	libimlib2-dev_1.4.6-2+deb8u1_ppc64el.deb
Debian	8	amd64	libimlib2-dev	< 1.4.6-2+deb8u1	libimlib2-dev_1.4.6-2+deb8u1_amd64.deb
Debian	8	arm64	libimlib2-dev	< 1.4.6-2+deb8u1	libimlib2-dev_1.4.6-2+deb8u1_arm64.deb
Debian	7	kfreebsd-amd64	libimlib2-dev	< 1.4.5-1+deb7u1	libimlib2-dev_1.4.5-1+deb7u1_kfreebsd-amd64.deb