Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia 8: 2022-0472 Moderate: Leptonica Denial of Service Issue

mageia
Calendar Grey December 17, 2022
Dist Mageia Esm H88
Mageia 2022-0472 outlines an update for leptonica that addresses a denial of service vulnerability caused by specifically designed JPEG images.
This update fixes a denial of service vulnerability in leptonlib

Summary

This update fixes a denial of service vulnerability in leptonlib. It can be made to crash with an arithmetic exception on specially crafted JPEG files. (CVE-2022-38266)

References

- https://bugs.mageia.org/show_bug.cgi?id=31266

- https://lists.debian.org/debian-lts-announce/2022/12/msg00018.html

- https://www.cve.org/CVERecord?id=CVE-2022-38266

Topics%20covered

Topics Covered

security advisory denial of service software update Mageia leptonica arithmetic exception

Resolution

SRPMS

- 8/core/leptonica-1.81.0-1.mga8

- 8/core/mingw-leptonica-1.81.0-1.mga8

Publication date: 17 Dec 2022
URL: https://advisories.mageia.org/MGASA-2022-0472.html
Type: security
CVE: CVE-2022-38266

Topics%20covered

Topics Covered

security advisory denial of service software update Mageia leptonica arithmetic exception

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here