U radu paketa libjpeg-turbo otkriven je sigurnosni propust koji omogućuje izvođenje napada uskraćivanjem usluge (eng. Denial of Service) te pokretanje proizvoljnog programskog koda.

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-10721
2012-07-17 17:01:32
--------------------------------------------------------------------------------

Name        : libjpeg-turbo
Product     : Fedora 16
Version     : 1.2.1
Release     : 1.fc16
URL         : http://sourceforge.net/projects/libjpeg-turbo
Summary     : A MMX/SSE2 accelerated library for manipulating JPEG image files
Description :
The libjpeg-turbo package contains a library of functions for manipulating
JPEG images.

--------------------------------------------------------------------------------
Update Information:

Update to the 1.2.1 bugfix release. For detailed list of changes check
/usr/share/doc/libjpeg-turbo/ChangeLog.txt
--------------------------------------------------------------------------------
ChangeLog:

* Mon Jul 16 2012 Adam Tkac <atkac redhat com> 1.2.1-1
- update to 1.2.1
* Thu Mar  8 2012 Adam Tkac <atkac redhat com> 1.2.0-1
- update to 1.2.0
* Fri Jan 13 2012 Fedora Release Engineering <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> -
1.1.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Mon Nov 21 2011 Orion Poplawski <orion cora nwra com> 1.1.1-3
- Make turobojpeg-devel depend on turbojpeg
* Fri Oct  7 2011 Orion Poplawski <orion cora nwra com> 1.1.1-2
- Ship the turbojpeg library (#744258)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #826849 - CVE-2012-2806 libjpeg-turbo: Heap-based buffer overflow
when decompressing corrupt JPEG images
        https://bugzilla.redhat.com/show_bug.cgi?id=826849
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update libjpeg-turbo' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce