Bug#745499: nvidia-settings: CVE-2013-6401 Jansson hash collision issue

Andreas Beckmann anbe at debian.org
Tue Apr 22 11:49:22 UTC 2014

Package: nvidia-settings
Version: 319.17-1
Severity: serious
Tags: security

Just saw this in the upstream changelog for 331.67:

    - Updated nvidia-settings to use libjansson commit
      88aa6a9e30e7465196a737bd0f82eb17f393a120 from the repository at:
      This commit contains the relevant fixes for CVE-2013-6401.

Looks like the nvidia-settings 319 series introduced an embedded
code copy of jansson (whatever that is).



More information about the pkg-nvidia-devel mailing list