MGASA-2018-0039

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2018-0039.html

Import Source

https://advisories.mageia.org/MGASA-2018-0039.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2018-0039

Related

CVE-2017-9216

Published

2018-01-03T14:22:14Z

Modified

2018-01-03T13:52:12Z

Summary

Updated jbig2dec packages fix security vulnerability

Details

libjbig2dec.a in Artifex jbig2dec 0.13 has a NULL pointer dereference in the jbig2huffmanget function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file (CVE-2017-9216).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:6 / jbig2dec

Package

Name: jbig2dec
Purl: pkg:rpm/mageia/jbig2dec?distro=mageia-6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.14-1.mga6

Ecosystem specific

{
    "section": "core"
}

Mageia:5 / jbig2dec

Package

Name: jbig2dec
Purl: pkg:rpm/mageia/jbig2dec?distro=mageia-5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.14-1.mga5

Ecosystem specific

{
    "section": "core"
}