Skip to content
OpenAdvisories
Medium ELSA-2024-2295 1 CVE

Moderate: libjpeg-turbo security update (Oracle Linux 9)

Published May 2, 2024 · Updated May 2, 2024

Ecosystem: Oracle Linux

Summary

[2.0.90.7]
- Fix CVE-2021-29390
- Resolves: RHEL-5413

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 9 libjpeg-turbo 0:2.0.90-7.el9
Oracle Linux · 9 libjpeg-turbo-devel 0:2.0.90-7.el9
Oracle Linux · 9 libjpeg-turbo-utils 0:2.0.90-7.el9
Oracle Linux · 9 turbojpeg 0:2.0.90-7.el9
Oracle Linux · 9 turbojpeg-devel 0:2.0.90-7.el9

Vulnerabilities 1

  • Unscored —
    CVE-2021-29390

    libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.