Описание
ELSA-2023-1068: libjpeg-turbo security update (MODERATE)
[2.0.90-6]
- Fix CVE-2021-46822
- Resolves: CVE-2021-46822
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
libjpeg-turbo
2.0.90-6.el9_1
libjpeg-turbo-devel
2.0.90-6.el9_1
libjpeg-turbo-utils
2.0.90-6.el9_1
turbojpeg
2.0.90-6.el9_1
turbojpeg-devel
2.0.90-6.el9_1
Oracle Linux x86_64
libjpeg-turbo
2.0.90-6.el9_1
libjpeg-turbo-devel
2.0.90-6.el9_1
libjpeg-turbo-utils
2.0.90-6.el9_1
turbojpeg
2.0.90-6.el9_1
turbojpeg-devel
2.0.90-6.el9_1
Связанные CVE
Связанные уязвимости
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoa ...