Red Hat Security AdvisoryRHSA-2024:2295
libjpeg-turbo security update
Released 2024-04-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) libjpeg-turbo-2.0.90-7.el9, libjpeg-turbo-devel-2.0.90-7.el9, libjpeg-turbo-utils-2.0.90-7.el9
- Red Hat Enterprise Linux CRB (v. 9) turbojpeg-2.0.90-7.el9, turbojpeg-devel-2.0.90-7.el9
Fixes 1 record
Priority MEDIUM 64
libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00822 · Published 2023-08-22 · Partial fix CWE-787
