Red Hat Security Advisory

RHSA-2019:3705

libjpeg-turbo security update

Released 2019-11-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) turbojpeg-devel-1.5.3-10.el8
Red Hat Enterprise Linux AppStream (v. 8) libjpeg-turbo-1.5.3-10.el8, libjpeg-turbo-devel-1.5.3-10.el8, libjpeg-turbo-utils-1.5.3-10.el8 +1

Fixes 1 record

TI-2018-10399 CVE-2018-14498 · GHSA-jg8v-w7gx-4g68

get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows…

LOW 34

get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.03092 Published 2019-03-07 Partial fix CWE-125