shield Security update for libjpeg-turbo

SUSE-SLE-Module-Desktop-Applications-15-2019-711

This update for libjpeg-turbo fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-14498: Fixed a heap-based buffer over read in get_8bit_row function which could allow to an attacker to cause denial of service (bsc#1128712). - CVE-2018-11813: Fixed the end-of-file mishandling in read_pixel in rdtarga.c, which allowed remote attackers to cause a denial-of-service via crafted JPG files due to a large loop (bsc#1096209) - CVE-2018-1152: Fixed a denial of service in start_input_bmp() rdbmp.c caused by a divide by zero when processing a crafted BMP image (bsc#1098155)

• Release Date
  Mar 22 2019
• References
  Bugzilla: 1128712, 1096209, 1098155
  CVEs: CVE-2018-11813, CVE-2018-1152, CVE-2018-14498
• Type
  security
• Severity
  moderate

cloud_download Downloads

Desktop Applications Module 15 x86_64

• Packages
  libjpeg-turbo
  A MMX/SSE2 accelerated library for manipulating JPEG image files

  1.5.3-5.7.1 lock src

  libjpeg8-32bit
  The MMX/SSE accelerated JPEG compression/decompression library

  8.1.2-5.7.1 lock rpm