A number of other Ubuntu supported distros have been affected

Dec 24, 2013 16:41 GMT  ·  By

Canonical published details about libjpeg and libjpeg-turbo vulnerabilities in its Ubuntu 13.10, Ubuntu 13.04, Ubuntu 12.10, Ubuntu 12.04 LTS, and Ubuntu 10.04 LTS operating systems.

According to the company, libjpeg and libjpeg-turbo could have been made to expose sensitive information.

It has been discovered that libjpeg and libjpeg-turbo incorrectly handled certain memory operations. An attacker could have used this issue with a specially-crafted JPEG file to possibly expose sensitive information.

For a more detailed description of the security problems, you can see Canonical's security notification.

The security flaws can be fixed if you upgrade your system(s) to the latest libjpeg-turbo8, libjpeg62, and libturbojpeg package, specific to each distribution. To apply the patch, run the Update Manager application.

In general, a standard system update will make all the necessary changes and a restart is not required.