ALSA-2023:1068

See a problem?
Source
https://errata.almalinux.org/9/ALSA-2023-1068.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2023:1068.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2023:1068
Related
Published
2023-03-06T00:00:00Z
Modified
2023-03-06T21:26:40Z
Summary
Moderate: libjpeg-turbo security update
Details

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.

Security Fix(es):

  • libjpeg-turbo: heap buffer overflow in getwordrgb_row() in rdppm.c (CVE-2021-46822)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:9 / libjpeg-turbo

Package

Name
libjpeg-turbo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.90-6.el9_1

AlmaLinux:9 / libjpeg-turbo-devel

Package

Name
libjpeg-turbo-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.90-6.el9_1

AlmaLinux:9 / libjpeg-turbo-utils

Package

Name
libjpeg-turbo-utils

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.90-6.el9_1

AlmaLinux:9 / turbojpeg

Package

Name
turbojpeg

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.90-6.el9_1

AlmaLinux:9 / turbojpeg-devel

Package

Name
turbojpeg-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.90-6.el9_1