This bug was fixed in the package exactimage - 0.9.1-5 --------------- exactimage (0.9.1-5) unstable; urgency=high
* Fix CVE-2015-3885: Integer overflow in the ljpeg_start function in dcraw * debian/patches: - Add CVE-2015-3885.patch, Avoid overflow in ljpeg_start() (Closes: #786785) -- Sven Eckelmann <s...@narfation.org> Mon, 25 May 2015 17:25:46 +0200 ** Changed in: exactimage (Ubuntu) Status: Confirmed => Fix Released ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2015-3885 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1425472 Title: bardecode crashes with buffer overflow To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/exactimage/+bug/1425472/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs