* bsc#1198146 Cross-References: * CVE-2022-1210 . # Security update for jbigkit Announcement ID: SUSE-SU-2025:20663-1 Release Date: 2025-08-29T09:09:41Z Rating: moderate References: * bsc#1198146 Cross-References: * CVE-2022-1210 CVSS scores: * CVE-2022-1210 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2022-1210 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for jbigkit fixes the following issues: * CVE-2022-1210: Malicious file leads to a denial of service in TIFF File Handler (bsc#1198146). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-242=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * libjbig2-2.1-slfo.1.1_2.1 * libjbig2-debuginfo-2.1-slfo.1.1_2.1 * jbigkit-debugsource-2.1-slfo.1.1_2.1 ## References: * https://www.suse.com/security/cve/CVE-2022-1210.html * https://bugzilla.suse.com/show_bug.cgi?id=1198146 . The latest jbigkit patch from SUSE mitigates a moderate severity denial of service vulnerability affecting SUSE Linux Micro 6.1.. SUSE Linux,jbigkit,security update,Denial of Service. . LinuxSecurity.com Team
* bsc#1198146 Cross-References: * CVE-2022-1210 . # Security update for jbigkit Announcement ID: SUSE-SU-2025:20509-1 Release Date: 2025-07-28T14:29:10Z Rating: moderate References: * bsc#1198146 Cross-References: * CVE-2022-1210 CVSS scores: * CVE-2022-1210 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2022-1210 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for jbigkit fixes the following issues: * Updated to version 2.1: * CVE-2022-1210: Fixed denial of service in TIFF File Handler (bsc#1198146) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-397=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * jbigkit-debugsource-2.1-4.1 * libjbig2-debuginfo-2.1-4.1 * libjbig2-2.1-4.1 ## References: * https://www.suse.com/security/cve/CVE-2022-1210.html * https://bugzilla.suse.com/show_bug.cgi?id=1198146 . SUSE Linux Micro 6.0 resolves a significant denial of service vulnerability in jbigkit through a critical security enhancement.. SUSE Linux Micro, jbigkit update, Denial of Service fix, CVE-2022-1210 fix. . LinuxSecurity.com Team
* bsc#1198146 Cross-References: * CVE-2022-1210 . # Security update for jbigkit Announcement ID: SUSE-SU-2024:2379-1 Rating: low References: * bsc#1198146 Cross-References: * CVE-2022-1210 CVSS scores: * CVE-2022-1210 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2022-1210 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Micro 5.5 An update that solves one vulnerability can now be installed. ## Description: This update for jbigkit fixes the following issues: * CVE-2022-1210: Fixed denial of service in TIFF File Handler (bsc#1198146). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2379=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (ppc64le) * jbigkit-debugsource-2.1-150000.3.5.1 * jbigkit-debuginfo-2.1-150000.3.5.1 * libjbig2-debuginfo-2.1-150000.3.5.1 * libjbig2-2.1-150000.3.5.1 ## References: * https://www.suse.com/security/cve/CVE-2022-1210.html * https://bugzilla.suse.com/show_bug.cgi?id=1198146 . SUSE has released a jbigkit update to fix the CVE-2022-1210 denial of service vulnerability. Users should follow the patch instructions to secure their systems. SUSE Update,jbigkit Security,Denial Of Service. . Severity: Low. LinuxSecurity.com Team
The container suse/nginx was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/nginx ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:4318-1 Container Tags : suse/nginx:1.21 , suse/nginx:1.21-5.62 , suse/nginx:latest Container Release : 5.62 Severity : low Type : security References : 1198146 CVE-2022-1210 ----------------------------------------------------------------- The container suse/nginx was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4968-1 Released: Mon Dec 25 09:12:49 2023 Summary: Security update for jbigkit Type: security Severity: low References: 1198146,CVE-2022-1210 This update for jbigkit fixes the following issues: - CVE-2022-1210: Fixed denial of service in TIFF File Handler (bsc#1198146). The following package changes have been done: - libjbig2-2.1-150000.3.5.1 updated . Alert regarding SUSE: 2023:4318-2, detailing incremental improvements for suse/nginx and related modules.. SUSE Container Update, Nginx Security, Jbigkit Patch, Low Severity Advisory. . Severity: Low. LinuxSecurity.com Team
* bsc#1198146 Cross-References: * CVE-2022-1210 . # Security update for jbigkit Announcement ID: SUSE-SU-2023:4968-1 Rating: low References: * bsc#1198146 Cross-References: * CVE-2022-1210 CVSS scores: * CVE-2022-1210 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2022-1210 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for jbigkit fixes the following issues: * CVE-2022-1210: Fixed denial of service in TIFF File Handler (bsc#1198146). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4968=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4968=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4968=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4968=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4968=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patchSUSE-SLE-Micro-5.3-2023-4968=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4968=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4968=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4968=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4968=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2023-4968=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4968=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2023-4968=1 ## Package List: * openSUSE Leap Micro 5.3 (aarch64 x86_64) * libjbig2-2.1-150000.3.5.1 * libjbig2-debuginfo-2.1-150000.3.5.1 * jbigkit-debugsource-2.1-150000.3.5.1 * jbigkit-debuginfo-2.1-150000.3.5.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * libjbig2-2.1-150000.3.5.1 * libjbig2-debuginfo-2.1-150000.3.5.1 * jbigkit-debugsource-2.1-150000.3.5.1 * jbigkit-debuginfo-2.1-150000.3.5.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * jbigkit-2.1-150000.3.5.1 * jbigkit-debuginfo-2.1-150000.3.5.1 * libjbig2-debuginfo-2.1-150000.3.5.1 * libjbig-devel-2.1-150000.3.5.1 * libjbig2-2.1-150000.3.5.1 * jbigkit-debugsource-2.1-150000.3.5.1 * openSUSE Leap 15.4 (x86_64) * libjbig2-32bit-debuginfo-2.1-150000.3.5.1 * libjbig-devel-32bit-2.1-150000.3.5.1 * libjbig2-32bit-2.1-150000.3.5.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * jbigkit-2.1-150000.3.5.1 * jbigkit-debuginfo-2.1-150000.3.5.1 * libjbig2-debuginfo-2.1-150000.3.5.1 * libjbig-devel-2.1-150000.3.5.1 * libjbig2-2.1-150000.3.5.1 * jbigkit-debugsource-2.1-150000.3.5.1 * openSUSE Leap 15.5 (x86_64) * libjbig2-32bit-debuginfo-2.1-150000.3.5.1 * libjbig-devel-32bit-2.1-150000.3.5.1 *libjbig2-32bit-2.1-150000.3.5.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libjbig2-2.1-150000.3.5.1 * libjbig2-debuginfo-2.1-150000.3.5.1 * jbigkit-debugsource-2.1-150000.3.5.1 * jbigkit-debuginfo-2.1-150000.3.5.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libjbig2-2.1-150000.3.5.1 * libjbig2-debuginfo-2.1-150000.3.5.1 * jbigkit-debugsource-2.1-150000.3.5.1 * jbigkit-debuginfo-2.1-150000.3.5.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libjbig2-2.1-150000.3.5.1 * libjbig2-debuginfo-2.1-150000.3.5.1 * jbigkit-debugsource-2.1-150000.3.5.1 * jbigkit-debuginfo-2.1-150000.3.5.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libjbig2-2.1-150000.3.5.1 * libjbig2-debuginfo-2.1-150000.3.5.1 * jbigkit-debugsource-2.1-150000.3.5.1 * jbigkit-debuginfo-2.1-150000.3.5.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * libjbig2-2.1-150000.3.5.1 * libjbig2-debuginfo-2.1-150000.3.5.1 * jbigkit-debugsource-2.1-150000.3.5.1 * jbigkit-debuginfo-2.1-150000.3.5.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * jbigkit-debuginfo-2.1-150000.3.5.1 * libjbig2-debuginfo-2.1-150000.3.5.1 * libjbig-devel-2.1-150000.3.5.1 * libjbig2-2.1-150000.3.5.1 * jbigkit-debugsource-2.1-150000.3.5.1 * Basesystem Module 15-SP5 (x86_64) * libjbig2-32bit-debuginfo-2.1-150000.3.5.1 * libjbig2-32bit-2.1-150000.3.5.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * jbigkit-debuginfo-2.1-150000.3.5.1 * libjbig2-32bit-debuginfo-2.1-150000.3.5.1 * libjbig2-debuginfo-2.1-150000.3.5.1 * libjbig-devel-2.1-150000.3.5.1 * libjbig2-2.1-150000.3.5.1 * jbigkit-debugsource-2.1-150000.3.5.1 * libjbig2-32bit-2.1-150000.3.5.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libjbig2-2.1-150000.3.5.1 * libjbig2-debuginfo-2.1-150000.3.5.1 * jbigkit-debugsource-2.1-150000.3.5.1 *jbigkit-debuginfo-2.1-150000.3.5.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libjbig2-2.1-150000.3.5.1 * libjbig2-debuginfo-2.1-150000.3.5.1 * jbigkit-debugsource-2.1-150000.3.5.1 * jbigkit-debuginfo-2.1-150000.3.5.1 ## References: * https://www.suse.com/security/cve/CVE-2022-1210.html * https://bugzilla.suse.com/show_bug.cgi?id=1198146 . Oracle issues a software update for libpng addressing a denial of service flaw marked as minor severity.. jbigkit security update, SUSE Linux patch, low impact update. . Severity: Low. LinuxSecurity.com Team
* bsc#1198146 Cross-References: * CVE-2022-1210 . # Security update for jbigkit Announcement ID: SUSE-SU-2023:4969-1 Rating: low References: * bsc#1198146 Cross-References: * CVE-2022-1210 CVSS scores: * CVE-2022-1210 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2022-1210 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Software Development Kit 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for jbigkit fixes the following issues: * CVE-2022-1210: Fixed denial of service in TIFF File Handler (bsc#1198146). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Software Development Kit 12 SP5 zypper in -t patch SUSE-SLE-SDK-12-SP5-2023-4969=1 * SUSE Linux Enterprise High Performance Computing 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-4969=1 * SUSE Linux Enterprise Server 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-4969=1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-4969=1 ## Package List: * SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64) * jbigkit-debuginfo-2.0-14.3.1 * jbigkit-debugsource-2.0-14.3.1 * libjbig-devel-2.0-14.3.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64) * jbigkit-debuginfo-2.0-14.3.1 * jbigkit-debugsource-2.0-14.3.1 * libjbig2-2.0-14.3.1 * libjbig2-debuginfo-2.0-14.3.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (x86_64) * libjbig2-debuginfo-32bit-2.0-14.3.1 * libjbig2-32bit-2.0-14.3.1 * SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64) * jbigkit-debuginfo-2.0-14.3.1 * jbigkit-debugsource-2.0-14.3.1 * libjbig2-2.0-14.3.1 * libjbig2-debuginfo-2.0-14.3.1 * SUSE Linux Enterprise Server 12 SP5 (s390x x86_64) * libjbig2-debuginfo-32bit-2.0-14.3.1 * libjbig2-32bit-2.0-14.3.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64) * jbigkit-debuginfo-2.0-14.3.1 * jbigkit-debugsource-2.0-14.3.1 * libjbig2-2.0-14.3.1 * libjbig2-debuginfo-2.0-14.3.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (x86_64) * libjbig2-debuginfo-32bit-2.0-14.3.1 * libjbig2-32bit-2.0-14.3.1 ## References: * https://www.suse.com/security/cve/CVE-2022-1210.html * https://bugzilla.suse.com/show_bug.cgi?id=1198146 . SUSE has issued an update for jbigkit which rectifies a minor denial of service security flaw. Apply the fix immediately.. SUSE Security Update,jbigkit Patch,denial of service fix,12 SP5 software. . Severity: Low. LinuxSecurity.com Team
JBIG-KIT could be made to crash if it opened a specially crafted file. (CVE-2017-9937) References: - https://bugs.mageia.org/show_bug.cgi?id=31189 . MGASA-2022-0449 - Updated jbigkit packages fix security vulnerability Publication date: 06 Dec 2022 URL: https://advisories.mageia.org/MGASA-2022-0449.html Type: security Affected Mageia releases: 8 CVE: CVE-2017-9937 JBIG-KIT could be made to crash if it opened a specially crafted file. (CVE-2017-9937) References: - https://bugs.mageia.org/show_bug.cgi?id=31189 - https://ubuntu.com/security/notices/USN-5742-1 - https://www.cve.org/CVERecord?id=CVE-2017-9937 SRPMS: - 8/core/jbigkit-2.1-7.1.mga8 - 8/core/graphicsmagick-1.3.38-1.1.mga8 - 8/core/cups-drivers-foo2kyo-0.1.0a-17.1.mga8 - 8/core/cups-drivers-foo2zjs-0.0-1.20121012.12.1.mga8 - 8/core/cups-drivers-magicolor2430dl-1.6.1-23.1.mga8 - 8/core/cups-drivers-magicolor2530dl-2.1.1-23.1.mga8 - 8/core/cups-drivers-magicolor5430dl-1.8.1-23.1.mga8 - 8/core/cups-drivers-magicolor5440dl-1.2.1-23.1.mga8 - 8/core/cups-drivers-splix-2.0.1-0.20130826svn315.12.1.mga8 - 8/core/hylafax+-7.0.4-1.1.mga8 - 8/core/netpbm-10.87.01-3.1.mga8 - 8/core/pbmtozjs-0-19.1.mga8 . The Mageia 8 Jbigkit patch addresses the critical stability vulnerability known as CVE-2017-9937, enhancing system security and performance.. Mageia 8 Security, Software Update, Jbigkit Patch. . LinuxSecurity.com Team
JBIG-KIT could be made to crash if it opened a specially crafted file.. =========================================================================Ubuntu Security Notice USN-5742-1 November 24, 2022 jbigkit vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 ESM - Ubuntu 14.04 ESM Summary: JBIG-KIT could be made to crash if it opened a specially crafted file. Software Description: - jbigkit: JBIG1 data compression library Details: It was discovered that JBIG-KIT incorrectly handled decoding certain large image files. If a user or automated system using JBIG-KIT were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.10: jbigkit-bin 2.1-3.1ubuntu0.22.10.1 libjbig0 2.1-3.1ubuntu0.22.10.1 Ubuntu 22.04 LTS: jbigkit-bin 2.1-3.1ubuntu0.22.04.1 libjbig0 2.1-3.1ubuntu0.22.04.1 Ubuntu 20.04 LTS: jbigkit-bin 2.1-3.1ubuntu0.20.04.1 libjbig0 2.1-3.1ubuntu0.20.04.1 Ubuntu 18.04 LTS: jbigkit-bin 2.1-3.1ubuntu0.18.04.1 libjbig0 2.1-3.1ubuntu0.18.04.1 Ubuntu 16.04 ESM: jbigkit-bin 2.1-3.1ubuntu0.1~esm1 libjbig0 2.1-3.1ubuntu0.1~esm1 Ubuntu 14.04 ESM: jbigkit-bin 2.0-2ubuntu4.1+esm1 libjbig0 2.0-2ubuntu4.1+esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5742-1 CVE-2017-9937 Package Information: https://launchpad.net/ubuntu/+source/jbigkit/2.1-3.1ubuntu0.22.10.1 https://launchpad.net/ubuntu/+source/jbigkit/2.1-3.1ubuntu0.22.04.1 https://launchpad.net/ubuntu/+source/jbigkit/2.1-3.1ubuntu0.20.04.1 https://launchpad.net/ubuntu/+source/jbigkit/2.1-3.1ubuntu0.18.04.1 . The recently discovered JBIG-KIT flaw impacts a range of Ubuntu versions, enabling malicious actors to trigger a denial of service condition.. jbigkit, ubuntu security update, denial of service, image decoding issue. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.