-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-2580 2015-02-26 02:33:29 --------------------------------------------------------------------------------
Name : libjpeg-turbo Product : Fedora 20 Version : 1.3.1 Release : 3.fc20 URL : http://sourceforge.net/projects/libjpeg-turbo Summary : A MMX/SSE2 accelerated library for manipulating JPEG image files Description : The libjpeg-turbo package contains a library of functions for manipulating JPEG images. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2014-9092 -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 25 2015 Petr Hracek <[email protected]> - 1.3.1-3 - CVE-2014-9092 libjpeg-turbo: denial of service via speciallu crafted JPEG file (#1169845) * Thu Apr 17 2014 Simone Caronni <[email protected]> - 1.3.1-2 - Re-add libjpeg-devel requirements for broken packages since Fedora 13. * Wed Apr 16 2014 Petr Hracek <[email protected]> - 1.3.1-1 - New upstream version - Remove upstreamed patches, add missing jpegint.h - Clean up SPEC file - Disable --static subpackage - Remove libjpeg obsolency, removed in Fedora 13 * Thu Dec 19 2013 Petr Hracek <[email protected]> - 1.3.0-2 - Apply fixes CVE-2013-6629, CVE-2013-6630 (#20131737) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1169845 - CVE-2014-9092 libjpeg-turbo: denial of service via specially-crafted JPEG file https://bugzilla.redhat.com/show_bug.cgi?id=1169845 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libjpeg-turbo' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/package-announce
