This update fixes a denial of service vulnerability in leptonlib. It can be made to crash with an arithmetic exception on specially crafted JPEG files. (CVE-2022-38266) References: . MGASA-2022-0472 - Updated leptonica packages fix security vulnerability Publication date: 17 Dec 2022 URL: https://advisories.mageia.org/MGASA-2022-0472.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-38266 This update fixes a denial of service vulnerability in leptonlib. It can be made to crash with an arithmetic exception on specially crafted JPEG files. (CVE-2022-38266) References: - https://bugs.mageia.org/show_bug.cgi?id=31266 - https://lists.debian.org/debian-lts-announce/2022/12/msg00018.html - https://www.cve.org/CVERecord?id=CVE-2022-38266 SRPMS: - 8/core/leptonica-1.81.0-1.mga8 - 8/core/mingw-leptonica-1.81.0-1.mga8 . Mageia 2022-0472 outlines an update for leptonica that addresses a denial of service vulnerability caused by specifically designed JPEG images.. Mageia 8 Update, Leptonica Security Issue, JPEG File Vulnerability. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.