Bug#745499: nvidia-settings: CVE-2013-6401 Jansson hash collision issue
anbe at debian.org
Tue Apr 22 11:49:22 UTC 2014
Just saw this in the upstream changelog for 331.67:
- Updated nvidia-settings to use libjansson commit
88aa6a9e30e7465196a737bd0f82eb17f393a120 from the repository at:
This commit contains the relevant fixes for CVE-2013-6401.
Looks like the nvidia-settings 319 series introduced an embedded
code copy of jansson (whatever that is).
More information about the pkg-nvidia-devel