Summary
[1.2.90-8]
- Fix CVE-2018-14498 (#1687475)
[1.2.90-7]
- Fix CVE-2018-11212 (#1586062)
- Fix CVE-2016-3616 (#1318509), CVE-2018-11213 (#1589091)
and CVE-2018-11214 (#1589110)
- Fix CVE-2018-11813 (#1591203)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libjpeg-turbo | 0:1.2.90-8.el7 |
| Oracle Linux · 7 | libjpeg-turbo-devel | 0:1.2.90-8.el7 |
| Oracle Linux · 7 | libjpeg-turbo-static | 0:1.2.90-8.el7 |
| Oracle Linux · 7 | libjpeg-turbo-utils | 0:1.2.90-8.el7 |
| Oracle Linux · 7 | turbojpeg | 0:1.2.90-8.el7 |
| Oracle Linux · 7 | turbojpeg-devel | 0:1.2.90-8.el7 |
Vulnerabilities 6
-
Unscored —
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and applica…
-
Unscored —
An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a…
-
Unscored —
An issue was discovered in libjpeg 9a. The get_text_gray_row function in rdppm.c allows remote attackers to cause a den…
-
Unscored —
An issue was discovered in libjpeg 9a. The get_text_rgb_row function in rdppm.c allows remote attackers to cause a deni…
-
Unscored —
libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.
-
Unscored —
get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of…