Lucene search

K
mageiaGentoo FoundationMGASA-2013-0333
HistoryNov 21, 2013 - 12:31 a.m.

Updated libjpeg packages fix vulnerabilities in libjpeg-turbo

2013-11-2100:31:46
Gentoo Foundation
advisories.mageia.org
15

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.0%

Updated libjpeg packages fix security vulnerabilities: libjpeg 6b and libjpeg-turbo will use uninitialized memory when decoding images with missing SOS data for the luminance component (Y) in presence of valid chroma data (Cr, Cb) (CVE-2013-6629). libjpeg-turbo will use uninitialized memory when handling Huffman tables (CVE-2013-6630).

OSVersionArchitecturePackageVersionFilename
Mageia2noarchlibjpeg< 1.2.0-4.2libjpeg-1.2.0-4.2.mga2
Mageia3noarchlibjpeg< 1.2.1-4.1libjpeg-1.2.1-4.1.mga3

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.0%