[ubuntu/artful-security] libjpeg-turbo 1.5.2-0ubuntu5.17.10.1 (Accepted)

[Marc Deslauriers]

libjpeg-turbo (1.5.2-0ubuntu5.17.10.1) artful-security; urgency=medium

  * SECURITY UPDATE: NULL pointer dereference via JPEG image
    - debian/patches/CVE-2017-15232-1.patch: exit gracefully with non-PPM
      formats in djpeg.1, djpeg.c.
    - debian/patches/CVE-2017-15232-2.patch: add further partial image
      decompression fixes in cdjpeg.h, djpeg.1, djpeg.c, jdapistd.c,
      wrbmp.c, wrgif.c, wrppm.c, wrppm.h, wrrle.c, wrtarga.c.
    - CVE-2017-15232
  * SECURITY UPDATE: division by zero via BMP image
    - debian/patches/CVE-2018-1152.patch: add size check in rdbmp.c.
    - CVE-2018-1152

Date: 2018-07-05 19:34:27.171764+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/libjpeg-turbo/1.5.2-0ubuntu5.17.10.1
-------------- next part --------------
Sorry, changesfile not available.