Stay Secure with the Latest Linux Advisories

security advisorydenial of servicememory issue

Ubuntu 12.04 LTS USN-2056-1 Moderate: DjVuLibre Denial of Service

DjVuLibre could be made to crash or run programs as your login if it opened a specially crafted file.. =========================================================================Ubuntu Security Notice USN-2056-1 December 16, 2013 djvulibre vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: DjVuLibre could be made to crash or run programs as your login if it opened a specially crafted file. Software Description: - djvulibre: DjVu image format library and tools Details: It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a specially crafted DjVu file, applications could be made to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: libdjvulibre21 3.5.24-9ubuntu0.1 After a standard system update you need to restart your session to make all the necessary changes. References: CVE-2012-6535 Package Information: https://launchpad.net/ubuntu/+source/djvulibre/3.5.24-9ubuntu0.1 . DjVuLibre might encounter stability problems or permit unapproved applications on Ubuntu 12.04; upgrade to the newest release to resolve these concerns.. DjVuLibre Vulnerability, Ubuntu Security Notice, Memory Management Issues. . LinuxSecurity.com Team

Dec 16, 2013 Ubuntu