Skip to content
OpenAdvisories
Unscored RHSA-2024:2295 1 CVE

Red Hat Security Advisory: libjpeg-turbo security update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 13

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream libjpeg-turbo 0:2.0.90-7.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream libjpeg-turbo-debuginfo 0:2.0.90-7.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream libjpeg-turbo-debugsource 0:2.0.90-7.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream libjpeg-turbo-devel 0:2.0.90-7.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream libjpeg-turbo-utils 0:2.0.90-7.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream libjpeg-turbo-utils-debuginfo 0:2.0.90-7.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream turbojpeg-debuginfo 0:2.0.90-7.el9
Red Hat · RHEL 9 enterprise_linux:9::crb libjpeg-turbo-debuginfo 0:2.0.90-7.el9
Red Hat · RHEL 9 enterprise_linux:9::crb libjpeg-turbo-debugsource 0:2.0.90-7.el9
Red Hat · RHEL 9 enterprise_linux:9::crb libjpeg-turbo-utils-debuginfo 0:2.0.90-7.el9
Red Hat · RHEL 9 enterprise_linux:9::crb turbojpeg 0:2.0.90-7.el9
Red Hat · RHEL 9 enterprise_linux:9::crb turbojpeg-debuginfo 0:2.0.90-7.el9
Red Hat · RHEL 9 enterprise_linux:9::crb turbojpeg-devel 0:2.0.90-7.el9

Vulnerabilities 1

  • Unscored —
    CVE-2021-29390

    libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2235521
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2295.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-29390
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-29390
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-29390
  • article
    https://github.com/libjpeg-turbo/libjpeg-turbo/commit/ccaba5d7894ecfb5a8f11e48d3f86e1f14d5a469
  • article
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/459#issuecomment-733720010
  • article
    https://github.com/libjpeg-turbo/libjpeg-turbo/pull/476
  • article
    https://github.com/libjpeg-turbo/libjpeg-turbo/pull/724