Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:2971-1

Опубликовано: 14 нояб. 2019
Источник: suse-cvrf

Описание

Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues:

  • CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo, when attempting to compress or decompress gigapixel images. [bsc#1156402]

Список пакетов

Container bci/openjdk-devel:11
libjpeg8-8.1.2-5.12.1
Container bci/openjdk:latest
libjpeg8-8.1.2-5.12.1
Container suse/rmt-nginx:latest
libjpeg8-8.1.2-5.12.1
Container suse/sles/15.2/virt-launcher:0.38.1
libjpeg8-8.1.2-5.12.1
Container suse/sles/15.3/libguestfs-tools:0.45.0
libjpeg8-8.1.2-5.12.1
Container suse/sles/15.3/virt-launcher:0.45.0
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-EC2-HVM
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-SAP-Azure
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
libjpeg62-62.2.0-5.12.1
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
libjpeg62-62.2.0-5.12.1
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-SAP-BYOS-Azure
libjpeg62-62.2.0-5.12.1
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-SAP-BYOS-EC2-HVM
libjpeg62-62.2.0-5.12.1
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-SAP-BYOS-GCE
libjpeg62-62.2.0-5.12.1
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-SAP-EC2-HVM
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-SAP-GCE
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-SAPCAL-Azure
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-SAPCAL-EC2-HVM
libjpeg8-8.1.2-5.12.1
Image SLES15-SP3-SAPCAL-GCE
libjpeg8-8.1.2-5.12.1
SUSE Linux Enterprise Module for Basesystem 15
libjpeg62-62.2.0-5.12.1
libjpeg62-devel-62.2.0-5.12.1
libjpeg8-8.1.2-5.12.1
libjpeg8-devel-8.1.2-5.12.1
libturbojpeg0-8.1.2-5.12.1
SUSE Linux Enterprise Module for Basesystem 15 SP1
libjpeg62-62.2.0-5.12.1
libjpeg62-devel-62.2.0-5.12.1
libjpeg8-8.1.2-5.12.1
libjpeg8-devel-8.1.2-5.12.1
libturbojpeg0-8.1.2-5.12.1
SUSE Linux Enterprise Module for Desktop Applications 15
libjpeg8-32bit-8.1.2-5.12.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
libjpeg8-32bit-8.1.2-5.12.1
SUSE Linux Enterprise Module for Package Hub 15
libjpeg-turbo-1.5.3-5.12.1

Ссылки

Описание

In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338

Затронутые продукты
Container bci/openjdk-devel:11:libjpeg8-8.1.2-5.12.1
Container bci/openjdk:latest:libjpeg8-8.1.2-5.12.1
Container suse/rmt-nginx:latest:libjpeg8-8.1.2-5.12.1
Container suse/sles/15.2/virt-launcher:0.38.1:libjpeg8-8.1.2-5.12.1
Ссылки