Description
libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libjpeg-turbo | 1:2.0.5-1 | — |
| Debian 13 | libjpeg-turbo | 1:2.0.5-1 | — |
| Debian 12 | libjpeg-turbo | 1:2.0.5-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | libjpeg6b | No fix yet | — |
| Ubuntu 26.04 LTS | libjpeg6b | No fix yet | — |
| Ubuntu 25.10 | libjpeg6b | No fix yet | — |
| Ubuntu 24.04 LTS | libjpeg6b | No fix yet | — |
| Ubuntu 22.04 LTS | libjpeg6b | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | libjpeg-turbo | 2.0.3-0ubuntu1.20.04.3 | USN-5631-1 |
| Ubuntu 20.04 LTS | libjpeg6b | No fix yet | — |
| Ubuntu 18.04 LTS | libjpeg-turbo | 1.5.2-0ubuntu5.18.04.6 | USN-5631-1 |
| Ubuntu 18.04 LTS | libjpeg9 +1 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | libjpeg-turbo | 1.4.2-0ubuntu3.4+esm1 | USN-5553-1 |
| Ubuntu Pro 16.04 LTS | libjpeg6b | 1:6b2-2ubuntu0.1~esm1 | USN-5497-2 |
| Ubuntu Pro 16.04 LTS | libjpeg9 | 1:9b-1ubuntu1+esm1 | USN-5336-1 |
| Ubuntu Pro 14.04 LTS | libjpeg-turbo | 1.3.0-0ubuntu2.1+esm2 | USN-5553-1 |
| Ubuntu Pro 14.04 LTS | libjpeg6b | 6b1-4ubuntu1+esm1 | USN-5497-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | turbojpeg +5 | 1.2.90-8.el7 | RHSA-2019:2052 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 | libjpeg-turbo +1 | 1.5.3-5.7.1 | SUSE-SU-2019:0711-1 |
| SLES 12 SP4 | libjpeg-turbo +1 | 1.5.3-31.14.2 | SUSE-SU-2019:1111-1 |
| SLES 12 SP3 | libjpeg-turbo +1 | 1.5.3-31.14.2 | SUSE-SU-2019:1111-1 |
| SLES 11 SP4 | jpeg | 6b-879.12.7.1 | SUSE-SU-2018:1825-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP4 | libjpeg-turbo +1 | 1.5.3-31.14.2 | SUSE-SU-2019:1111-1 |
| SLES for SAP 12 SP3 | libjpeg-turbo +1 | 1.5.3-31.14.2 | SUSE-SU-2019:1111-1 |
| SLES for SAP 11 SP4 | jpeg | 6b-879.12.7.1 | SUSE-SU-2018:1825-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | libjpeg-turbo | 8.2.2-65.2 | openSUSE-SU-2024:10952-1 |
| openSUSE Leap 15.0 | libjpeg-turbo +1 | 1.5.3-lp150.4.3.2 | openSUSE-SU-2019:1118-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.23 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.22 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.21 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.20 | libjpeg-turbo | 1.5.3-r3 | — |
Show 15 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.18 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.17 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.16 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.15 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.14 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.13 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.12 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.11 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.10 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.9 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.8 | libjpeg-turbo | 1.5.3-r3 | — |
| Alpine v3.7 | libjpeg-turbo | 1.5.3-r2 | — |
| Alpine v3.6 | libjpeg-turbo | 1.5.3-r2 | — |
| Alpine v3.5 | libjpeg-turbo | 1.5.3-r2 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | turbojpeg +5 | 1.2.90-6.amzn2.0.3 | ALAS2-2019-1350 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | turbojpeg +5 | 1.2.90-8.el7 | ELSA-2019-2052 |
Advisories 14
- WID-SEC-2022-0517 Red Hat Enterprise Linux: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- RHSA-2019:2052 Red Hat Security Advisory: libjpeg-turbo security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- USN-5553-1 libjpeg-turbo vulnerabilities Ubuntu Security Notices (USN) · Jun 29, 2026
- USN-5497-1 libjpeg6b vulnerabilities Ubuntu Security Notices (USN) · Jun 29, 2026
- USN-5497-2 libjpeg6b vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- USN-5336-1 libjpeg9 vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- USN-5631-1 libjpeg-turbo vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- SUSE-SU-2019:1111-1 Security update for libjpeg-turbo SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:1825-1 Security update for jpeg SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:0711-1 Security update for libjpeg-turbo SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:1118-1 Security update for libjpeg-turbo SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10952-1 libjpeg-turbo-2.1.1-65.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- ALAS2-2019-1350 Moderate: libjpeg-turbo security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Nov 7, 2019
- ELSA-2019-2052 Moderate: libjpeg-turbo security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Aug 13, 2019
References
- https://github.com/ChijinZ/security_advisories/tree/master/libjpeg-v9c
- https://github.com/ChijinZ/security_advisories/blob/master/libjpeg-v9c/mail.pdf
- openSUSE-SU-2019:1118 vendor-advisory
- openSUSE-SU-2019:1343 vendor-advisory
- RHSA-2019:2052 vendor-advisory
- https://bugs.gentoo.org/727908
- http://www.ijg.org/files/jpegsrc.v9d.tar.gz