Medium ELSA-2025-7540 1 CVE

Moderate: libjpeg-turbo security update (Oracle Linux 8)

Published May 15, 2025 · Updated May 15, 2025

Ecosystem: Oracle Linux

Summary

[1.5.3-14]
- updated previous fix (RHEL-87364)

[1.5.3-13]
- fix CVE-2020-13790: heap-based buffer over-read in get_rgb_row (RHEL-87364)

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	libjpeg-turbo	0:1.5.3-14.el8_10
Oracle Linux · 8	libjpeg-turbo-devel	0:1.5.3-14.el8_10
Oracle Linux · 8	libjpeg-turbo-utils	0:1.5.3-14.el8_10
Oracle Linux · 8	turbojpeg	0:1.5.3-14.el8_10
Oracle Linux · 8	turbojpeg-devel	0:1.5.3-14.el8_10

Vulnerabilities 1

Unscored —

CVE-2020-13790

libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed P…

libjpeg-turbo libjpeg-turbo libjpeg-turbo Debian Ubuntu Alpine

Jun 3, 2020