Updated jbigkit packages fix security vulnerability

2022-12-0702:32:48

Gentoo Foundation

advisories.mageia.org

jbig-kit security fix

file opening vulnerability

cve-2017-9937

unix

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

50.6%

JSON

JBIG-KIT could be made to crash if it opened a specially crafted file. (CVE-2017-9937)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchjbigkit< 2.1-7.1jbigkit-2.1-7.1.mga8
Mageia8noarchgraphicsmagick< 1.3.38-1.1graphicsmagick-1.3.38-1.1.mga8
Mageia8noarchcups-drivers-foo2kyo< 0.1.0a-17.1cups-drivers-foo2kyo-0.1.0a-17.1.mga8
Mageia8noarchcups-drivers-foo2zjs< 0.0-1.20121012.12.1cups-drivers-foo2zjs-0.0-1.20121012.12.1.mga8
Mageia8noarchcups-drivers-magicolor2430dl< 1.6.1-23.1cups-drivers-magicolor2430dl-1.6.1-23.1.mga8
Mageia8noarchcups-drivers-magicolor2530dl< 2.1.1-23.1cups-drivers-magicolor2530dl-2.1.1-23.1.mga8
Mageia8noarchcups-drivers-magicolor5430dl< 1.8.1-23.1cups-drivers-magicolor5430dl-1.8.1-23.1.mga8
Mageia8noarchcups-drivers-magicolor5440dl< 1.2.1-23.1cups-drivers-magicolor5440dl-1.2.1-23.1.mga8
Mageia8noarchcups-drivers-splix< 2.0.1-0.20130826svn315.12.1cups-drivers-splix-2.0.1-0.20130826svn315.12.1.mga8
Mageia8noarchhylafax+< 7.0.4-1.1hylafax+-7.0.4-1.1.mga8

OS	Version	Architecture	Package	Version	Filename
Mageia	8	noarch	jbigkit	< 2.1-7.1	jbigkit-2.1-7.1.mga8
Mageia	8	noarch	graphicsmagick	< 1.3.38-1.1	graphicsmagick-1.3.38-1.1.mga8
Mageia	8	noarch	cups-drivers-foo2kyo	< 0.1.0a-17.1	cups-drivers-foo2kyo-0.1.0a-17.1.mga8
Mageia	8	noarch	cups-drivers-foo2zjs	< 0.0-1.20121012.12.1	cups-drivers-foo2zjs-0.0-1.20121012.12.1.mga8
Mageia	8	noarch	cups-drivers-magicolor2430dl	< 1.6.1-23.1	cups-drivers-magicolor2430dl-1.6.1-23.1.mga8
Mageia	8	noarch	cups-drivers-magicolor2530dl	< 2.1.1-23.1	cups-drivers-magicolor2530dl-2.1.1-23.1.mga8
Mageia	8	noarch	cups-drivers-magicolor5430dl	< 1.8.1-23.1	cups-drivers-magicolor5430dl-1.8.1-23.1.mga8
Mageia	8	noarch	cups-drivers-magicolor5440dl	< 1.2.1-23.1	cups-drivers-magicolor5440dl-1.2.1-23.1.mga8
Mageia	8	noarch	cups-drivers-splix	< 2.0.1-0.20130826svn315.12.1	cups-drivers-splix-2.0.1-0.20130826svn315.12.1.mga8
Mageia	8	noarch	hylafax+	< 7.0.4-1.1	hylafax+-7.0.4-1.1.mga8