Red Hat Security AdvisoryRHSA-2019:2052
libjpeg-turbo security update
Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libjpeg-turbo-1.2.90-8.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libjpeg-turbo-devel-1.2.90-8.el7, libjpeg-turbo-static-1.2.90-8.el7, libjpeg-turbo-utils-1.2.90-8.el7 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) libjpeg-turbo-1.2.90-8.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libjpeg-turbo-devel-1.2.90-8.el7, libjpeg-turbo-static-1.2.90-8.el7, libjpeg-turbo-utils-1.2.90-8.el7 +2
- Red Hat Enterprise Linux Server (v. 7) libjpeg-turbo-1.2.90-8.el7, libjpeg-turbo-1.2.90-8.el7.ppc, libjpeg-turbo-devel-1.2.90-8.el7 +1
- Red Hat Enterprise Linux Server Optional (v. 7) libjpeg-turbo-static-1.2.90-8.el7, libjpeg-turbo-static-1.2.90-8.el7.ppc, libjpeg-turbo-utils-1.2.90-8.el7 +4
- Red Hat Enterprise Linux Workstation (v. 7) libjpeg-turbo-1.2.90-8.el7, libjpeg-turbo-devel-1.2.90-8.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libjpeg-turbo-static-1.2.90-8.el7, libjpeg-turbo-utils-1.2.90-8.el7, turbojpeg-1.2.90-8.el7 +1
Fixes 6 records
Priority MEDIUM 45
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.04222 · Published 2017-02-13 · Partial fix CWE-476
Priority LOW 39
libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03139 · Published 2018-06-06 · Partial fix CWE-834
Priority LOW 36
An issue was discovered in libjpeg 9a and 9d.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.04558 · Published 2018-05-16 · Partial fix CWE-369
Priority LOW 34
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or…
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.03092 · Published 2019-03-07 · Partial fix CWE-125
Priority LOW 34
An issue was discovered in libjpeg 9a.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02525 · Published 2018-05-16 · Partial fix
Priority LOW 33
An issue was discovered in libjpeg 9a.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02344 · Published 2018-05-16 · Partial fix
THREATIST.IORead the docs