Scientific Linux SL5.x SLSA-2013:1804-1 Moderate: Libjpeg Data Disclosure

Date: Tue, 10 Dec 2013 15:53:19 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Moderate: libjpeg on SL5.x i386/x86_64
MIME-Version: 1.0

Synopsis: Moderate: libjpeg security update
Advisory ID: SLSA-2013:1804-1
Issue Date: 2013-12-10
CVE Numbers: CVE-2013-6629
--

An uninitialized memory read issue was found in the way libjpeg decoded
images with missing Start Of Scan (SOS) JPEG markers. A remote attacker
could create a specially crafted JPEG image that, when decoded, could
possibly lead to a disclosure of potentially sensitive information.
(CVE-2013-6629)
--

SL5
 x86_64
 libjpeg-6b-38.i386.rpm
 libjpeg-6b-38.x86_64.rpm
 libjpeg-debuginfo-6b-38.i386.rpm
 libjpeg-debuginfo-6b-38.x86_64.rpm
 libjpeg-devel-6b-38.i386.rpm
 libjpeg-devel-6b-38.x86_64.rpm
 i386
 libjpeg-6b-38.i386.rpm
 libjpeg-debuginfo-6b-38.i386.rpm
 libjpeg-devel-6b-38.i386.rpm

- Scientific Linux Development Team