RHSA-2013:1804: Moderate: libjpeg security update
The libjpeg package contains a library of functions for manipulating JPEGimages. It also contains simple client programs for accessing thelibjpeg functions.An uninitialized memory read issue was found in the way libjpeg decodedimages with missing Start Of Scan (SOS) JPEG markers. A remote attackercould create a specially crafted JPEG image that, when decoded, couldpossibly lead to a disclosure of potentially sensitive information.(CVE-2013-6629)All libjpeg users are advised to upgrade to this updated package, whichcontains a backported patch to correct this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2013:1804?
The severity of RHSA-2013:1804 is classified as moderate.
How do I fix RHSA-2013:1804?
To fix RHSA-2013:1804, update the libjpeg package to the latest version as provided by your system's package manager.
What vulnerability does RHSA-2013:1804 address?
RHSA-2013:1804 addresses an uninitialized memory read issue in the libjpeg library when decoding images with missing Start Of Scan (SOS) segments.
Is RHSA-2013:1804 a critical vulnerability?
No, RHSA-2013:1804 is not considered a critical vulnerability; it has a moderate impact.
Who is affected by RHSA-2013:1804?
All users and systems utilizing the vulnerable libjpeg package are affected by RHSA-2013:1804.