[ubuntu/precise-updates] libjpeg-turbo 1.1.90+svn733-0ubuntu4.3 (Accepted)

[Ubuntu Archive Robot]

libjpeg-turbo (1.1.90+svn733-0ubuntu4.3) precise-security; urgency=low

  * SECURITY UPDATE: information disclosure via uninitialized memory in
    the get_sos function (LP: #1252912)
    - debian/patches/CVE-2013-6629.patch: check for duplications in
      jdmarker.c.
    - CVE-2013-6629
  * SECURITY UPDATE: information disclosure via uninitialized memory in
    the get_dht function (LP: #1252912)
    - debian/patches/CVE-2013-6630.patch: properly clear out memory in
      jdmarker.c.
    - CVE-2013-6630
  * This package does _not_ contain the changes from
    1.1.90+svn733-0ubuntu4.2 in precise-proposed.

Date: 2013-11-22 15:34:14.680296+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/precise/+source/libjpeg-turbo/1.1.90+svn733-0ubuntu4.3
-------------- next part --------------
Sorry, changesfile not available.