Ubuntu 22.10: 5742-1 Critical: jbigkit Denial Of Service

ubuntu

November 24, 2022

JBIG-KIT could be made to crash if it opened a specially crafted file.

Summary

JBIG-KIT could be made to crash if it opened a specially crafted file.

Software Description:

- jbigkit: JBIG1 data compression library

Details:

It was discovered that JBIG-KIT incorrectly handled decoding certain large

image files. If a user or automated system using JBIG-KIT were tricked into

opening a specially crafted file, an attacker could possibly use this issue

to cause a denial of service.

Topics Covered

security advisory denial of service critical ubuntu jbigkit

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
   jbigkit-bin                     2.1-3.1ubuntu0.22.10.1
   libjbig0                        2.1-3.1ubuntu0.22.10.1

Ubuntu 22.04 LTS:
   jbigkit-bin                     2.1-3.1ubuntu0.22.04.1
   libjbig0                        2.1-3.1ubuntu0.22.04.1

Ubuntu 20.04 LTS:
   jbigkit-bin                     2.1-3.1ubuntu0.20.04.1
   libjbig0                        2.1-3.1ubuntu0.20.04.1

Ubuntu 18.04 LTS:
   jbigkit-bin                     2.1-3.1ubuntu0.18.04.1
   libjbig0                        2.1-3.1ubuntu0.18.04.1

Ubuntu 16.04 ESM:
   jbigkit-bin                     2.1-3.1ubuntu0.1~esm1
   libjbig0                        2.1-3.1ubuntu0.1~esm1

Ubuntu 14.04 ESM:
   jbigkit-bin                     2.0-2ubuntu4.1+esm1
   libjbig0                        2.0-2ubuntu4.1+esm1

In general, a standard system update will make all the necessary changes.