Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:2972-1

Опубликовано: 14 нояб. 2019
Источник: suse-cvrf

Описание

Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues:

  • CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo, when attempting to compress or decompress gigapixel images. [bsc#1156402]

Список пакетов

Container caasp/v4/nginx-ingress-controller:beta1
libjpeg8-8.1.2-31.19.1
HPE Helion OpenStack 8
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
Image SLES12-SP5-Azure-SAP-BYOS
libjpeg62-62.2.0-31.19.1
libjpeg8-8.1.2-31.19.1
Image SLES12-SP5-Azure-SAP-On-Demand
libjpeg62-62.2.0-31.19.1
libjpeg8-8.1.2-31.19.1
Image SLES12-SP5-EC2-SAP-BYOS
libjpeg62-62.2.0-31.19.1
libjpeg8-8.1.2-31.19.1
Image SLES12-SP5-EC2-SAP-On-Demand
libjpeg62-62.2.0-31.19.1
libjpeg8-8.1.2-31.19.1
Image SLES12-SP5-GCE-SAP-BYOS
libjpeg62-62.2.0-31.19.1
libjpeg8-8.1.2-31.19.1
Image SLES12-SP5-GCE-SAP-On-Demand
libjpeg62-62.2.0-31.19.1
libjpeg8-8.1.2-31.19.1
Image SLES12-SP5-OCI-BYOS-SAP-BYOS
libjpeg62-62.2.0-31.19.1
libjpeg8-8.1.2-31.19.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libjpeg62-62.2.0-31.19.1
libjpeg8-8.1.2-31.19.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libjpeg62-62.2.0-31.19.1
libjpeg8-8.1.2-31.19.1
SUSE Enterprise Storage 5
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE Linux Enterprise Desktop 12 SP4
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE Linux Enterprise Server 12 SP1-LTSS
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE Linux Enterprise Server 12 SP2-BCL
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE Linux Enterprise Server 12 SP2-LTSS
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE Linux Enterprise Server 12 SP3-BCL
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE Linux Enterprise Server 12 SP3-LTSS
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE Linux Enterprise Server 12 SP4
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE Linux Enterprise Server 12 SP5
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE Linux Enterprise Software Development Kit 12 SP4
libjpeg62-devel-62.2.0-31.19.1
libjpeg8-devel-8.1.2-31.19.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libjpeg62-devel-62.2.0-31.19.1
libjpeg8-devel-8.1.2-31.19.1
SUSE OpenStack Cloud 7
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE OpenStack Cloud 8
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1
SUSE OpenStack Cloud Crowbar 8
libjpeg-turbo-1.5.3-31.19.1
libjpeg62-62.2.0-31.19.1
libjpeg62-32bit-62.2.0-31.19.1
libjpeg62-turbo-1.5.3-31.19.1
libjpeg8-8.1.2-31.19.1
libjpeg8-32bit-8.1.2-31.19.1
libturbojpeg0-8.1.2-31.19.1

Ссылки

Описание

In generate_jsimd_ycc_rgb_convert_neon of jsimd_arm64_neon.S, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-120551338

Затронутые продукты
Container caasp/v4/nginx-ingress-controller:beta1:libjpeg8-8.1.2-31.19.1
HPE Helion OpenStack 8:libjpeg-turbo-1.5.3-31.19.1
HPE Helion OpenStack 8:libjpeg62-32bit-62.2.0-31.19.1
HPE Helion OpenStack 8:libjpeg62-62.2.0-31.19.1
Ссылки