Red Hat Security AdvisoryRHSA-2023:1068
libjpeg-turbo security update
Released 2023-03-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) turbojpeg-2.0.90-6.el9_1, turbojpeg-devel-2.0.90-6.el9_1
- Red Hat Enterprise Linux AppStream (v. 9) libjpeg-turbo-2.0.90-6.el9_1, libjpeg-turbo-devel-2.0.90-6.el9_1, libjpeg-turbo-utils-2.0.90-6.el9_1
Fixes 1 record
Priority LOW 27
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01076 · Published 2022-06-18 · Fixed CWE-787
