Florian Weimer of the Red Hat product security team discovered multiple buffer overflows in jbigkit, which could lead to the execution of arbitrary code when processing malformed images.

For the stable distribution (wheezy), this problem has been fixed in version 2.0-2+deb7u1. For the unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your jbigkit packages.

jbigkit on Debian Linux

This check tests the installed software version using the apt package manager.

• http://www.debian.org/security/2014/dsa-2900.html

---

Updated on 2015-03-25