Bug#745499: nvidia-settings: CVE-2013-6401 Jansson hash collision issue
Andreas Beckmann
anbe at debian.org
Tue Apr 22 11:49:22 UTC 2014
Package: nvidia-settings
Version: 319.17-1
Severity: serious
Tags: security
Just saw this in the upstream changelog for 331.67:
- Updated nvidia-settings to use libjansson commit
88aa6a9e30e7465196a737bd0f82eb17f393a120 from the repository at:
git://github.com/akheron/jansson.git
This commit contains the relevant fixes for CVE-2013-6401.
Looks like the nvidia-settings 319 series introduced an embedded
code copy of jansson (whatever that is).
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6401
Andreas
More information about the pkg-nvidia-devel
mailing list