Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:1957-1

Опубликовано: 11 июн. 2021
Источник: suse-cvrf

Описание

Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues:

  • CVE-2020-17541: Fixed a stack-based buffer overflow in the 'transform' component (bsc#1186764).

Список пакетов

Image SLES12-SP4-SAP-Azure
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP4-SAP-Azure-BYOS
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP4-SAP-EC2-HVM
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP4-SAP-EC2-HVM-BYOS
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP4-SAP-GCE
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP4-SAP-GCE-BYOS
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP5-Azure-SAP-BYOS
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP5-Azure-SAP-On-Demand
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP5-EC2-SAP-BYOS
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP5-EC2-SAP-On-Demand
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP5-GCE-SAP-BYOS
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP5-GCE-SAP-On-Demand
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP5-OCI-BYOS-SAP-BYOS
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libjpeg62-62.2.0-31.25.1
libjpeg8-8.1.2-31.25.1
SUSE Linux Enterprise Server 12 SP5
libjpeg-turbo-1.5.3-31.25.1
libjpeg62-62.2.0-31.25.1
libjpeg62-32bit-62.2.0-31.25.1
libjpeg62-turbo-1.5.3-31.25.1
libjpeg8-8.1.2-31.25.1
libjpeg8-32bit-8.1.2-31.25.1
libturbojpeg0-8.1.2-31.25.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libjpeg-turbo-1.5.3-31.25.1
libjpeg62-62.2.0-31.25.1
libjpeg62-32bit-62.2.0-31.25.1
libjpeg62-turbo-1.5.3-31.25.1
libjpeg8-8.1.2-31.25.1
libjpeg8-32bit-8.1.2-31.25.1
libturbojpeg0-8.1.2-31.25.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libjpeg62-devel-62.2.0-31.25.1
libjpeg8-devel-8.1.2-31.25.1

Ссылки

Описание

Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial of service of the target service.

Затронутые продукты
Image SLES12-SP4-SAP-Azure-BYOS:libjpeg62-62.2.0-31.25.1
Image SLES12-SP4-SAP-Azure-BYOS:libjpeg8-8.1.2-31.25.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libjpeg62-62.2.0-31.25.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libjpeg8-8.1.2-31.25.1
Ссылки
Уязвимость SUSE-SU-2021:1957-1