tocsin

Debian/exactimage: unknown

econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.

Action: Upgrade exactimage to 0.8.9-2 or later.

Affected

introducedfixedlast affected
00.8.9-2-

Fixed versions

0.8.9-2

Sources

published · modified · JSON