RHSA-2013:1803: Moderate: libjpeg-turbo security update
The libjpeg-turbo package contains a library of functions for manipulatingJPEG images. It also contains simple client programs for accessing thelibjpeg functions.An uninitialized memory read issue was found in the way libjpeg-turbodecoded images with missing Start Of Scan (SOS) JPEG markers or DefineHuffman Table (DHT) JPEG markers. A remote attacker could create aspecially crafted JPEG image that, when decoded, could possibly lead to adisclosure of potentially sensitive information. (CVE-2013-6629,CVE-2013-6630)All libjpeg-turbo users are advised to upgrade to these updated packages,which contain backported patches to correct these issues.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2013:1803?
The severity of RHSA-2013:1803 is classified as moderate.
How do I fix RHSA-2013:1803?
To fix RHSA-2013:1803, update the libjpeg-turbo package to version 1.2.1-3.el6_5 or a later version.
What vulnerabilities are addressed in RHSA-2013:1803?
RHSA-2013:1803 addresses an uninitialized memory read issue found in libjpeg-turbo when decoding images.
Which packages are affected by RHSA-2013:1803?
The affected packages include libjpeg-turbo, libjpeg-turbo-debuginfo, libjpeg-turbo-devel, and libjpeg-turbo-static.
Is RHSA-2013:1803 applicable to all systems?
RHSA-2013:1803 is specifically applicable to systems running the affected versions of the Red Hat libjpeg-turbo package.