Bug#768369: [libjpeg62-turbo] [DOS] Stack smashing

2014-11-09 Thread Lexie Parsimoniae
What works: convert 003632r270.jpg -rotate 270 junk.jpg This works too with libjpeg-6b: convert -define jpeg:optimize-coding=true 003632r270.jpg -rotate 270 junk.jpg The same command fails if we use libturbojpeg 1.3.1: gdb convert run -define jpeg:optimize-coding=true 003632r270.jpg -rotat

Bug#768369: [libjpeg62-turbo] [DOS] Stack smashing

2014-11-06 Thread bastien ROUCARIES
Package: libjpeg62-turbo Version: 1:1.3.1-10 Severity: serious Tags: security X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org control: affects -1 imagemagick Special crafted jpeg files lead to stack smashing and lead to at least a dos (maybe remote due to imagick). Source file are her