From Mageia wiki
MGASA-2012-0274
| Date: | September 18th, 2012 |
| Affected releases: | 1, 2 |
Description:
Updated openjpeg packages fix security vulnerability:
It was found that OpenJPEG failed to sanity-check an image header field
before using it. A remote attacker could provide a specially-crafted image
file that could cause an application linked against OpenJPEG to crash or,
possibly, execute arbitrary code (CVE-2012-3535).
Updated Packages:
Mageia 1:
lib(64)openjpeg2-1.3-7.3.mga1
lib(64)openjpeg-devel-1.3-7.3.mga1
Mageia 2:
openjpeg-1.5.0-1.4.mga2
lib(64)openjpeg1-1.5.0-1.4.mga2
lib(64)openjpeg-devel-1.5.0-1.4.mga2
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3535
https://rhn.redhat.com/errata/RHSA-2012-1283.html
https://bugs.mageia.org/show_bug.cgi?id=7510
