LWN.net Logo

Fedora alert FEDORA-2013-1490 (leptonica)

From:  updates@fedoraproject.org
To:  package-announce@lists.fedoraproject.org
Subject:  [SECURITY] Fedora 18 Update: leptonica-1.69-5.fc18
Date:  Sun, 03 Feb 2013 13:48:11 +0000
Message-ID:  <20130203134811.33ED222149@bastion01.phx2.fedoraproject.org>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-1490 2013-01-25 20:32:58 -------------------------------------------------------------------------------- Name : leptonica Product : Fedora 18 Version : 1.69 Release : 5.fc18 URL : http://code.google.com/p/leptonica/ Summary : C library for efficient image processing and image analysis operations Description : The library supports many operations that are useful on * Document images * Natural images Fundamental image processing and image analysis operations * Rasterop (aka bitblt) * Affine transforms (scaling, translation, rotation, shear) on images of arbitrary pixel depth * Projective and bi-linear transforms * Binary and gray scale morphology, rank order filters, and convolution * Seed-fill and connected components * Image transformations with changes in pixel depth, both at the same scale and with scale change * Pixelwise masking, blending, enhancement, arithmetic ops, etc. -------------------------------------------------------------------------------- Update Information: Security libwebp release, where an integer overflow allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted WebP image. -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 18 2013 Adam Tkac <atkac redhat com> - 1.69-5 - rebuild due to "jpeg8-ABI" feature drop * Fri Dec 28 2012 Richard W.M. Jones <rjones@redhat.com> - 1.69-4 - Rebuild, see http://lists.fedoraproject.org/pipermail/devel/2012-Decem... * Fri Dec 21 2012 Adam Tkac <atkac redhat com> - 1.69-3 - rebuild against new libjpeg -------------------------------------------------------------------------------- References: [ 1 ] Bug #875071 - CVE-2012-5127 libwebp: Integer overflow when processing crafted WebP image https://bugzilla.redhat.com/show_bug.cgi?id=875071 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update leptonica' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds