Information on source package jbig2dec

Available versions

ReleaseVersion
jessie (security)0.13-4~deb8u2
stretch0.13-4.1
buster0.14-1
sid0.14-1

Open issues

BugjessiestretchbustersidDescription
CVE-2017-9216vulnerable (no DSA)vulnerable (no DSA)fixedfixedlibjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and ...

Resolved issues

BugDescription
CVE-2017-7976Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of ...
CVE-2017-7975Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds ...
CVE-2017-7885Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to ...
CVE-2016-9601ghostscript before version 9.21 is vulnerable to a heap based buffer ...
CVE-2016-8729An exploitable memory corruption vulnerability exists in the JBIG2 ...
CVE-2009-0196Heap-based buffer overflow in the big2_decode_symbol_dict function ...

Security announcements

DSA / DLADescription
DSA-3855-1jbig2dec - security update
DLA-942-1jbig2dec - security update
DLA-874-1jbig2dec - security update
DSA-3817-1jbig2dec - security update

Search for package or bug name: Reporting problems