SUSE-SU-2019:1111-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2019/suse-su-20191111-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1111-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2019:1111-1

Related

Published

2019-04-30T10:59:46Z

Modified

2019-04-30T10:59:46Z

Summary

Security update for libjpeg-turbo

Details

This update for libjpeg-turbo fixes the following issues:

The following security vulnerabilities were addressed:

CVE-2018-14498: Fixed a heap-based buffer over read in get8bitrow function which could allow to an attacker to cause denial of service (bsc#1128712).
CVE-2018-11813: Fixed the end-of-file mishandling in read_pixel in rdtarga.c, which allowed remote attackers to cause a denial-of-service via crafted JPG files due to a large loop (bsc#1096209)
CVE-2018-1152: Fixed a denial of service in startinputbmp() rdbmp.c caused by a divide by zero when processing a crafted BMP image (bsc#1098155)

References

Affected packages

SUSE:Linux Enterprise Desktop 12 SP3 / libjpeg-turbo

Package

Name: libjpeg-turbo
Purl: purl:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-32bit": "62.2.0-31.14.2",
            "libjpeg8": "8.1.2-31.14.2",
            "libturbojpeg0": "8.1.2-31.14.2",
            "libjpeg62-turbo": "1.5.3-31.14.2",
            "libjpeg-turbo": "1.5.3-31.14.2",
            "libjpeg62": "62.2.0-31.14.2",
            "libjpeg8-32bit": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Desktop 12 SP3 / libjpeg62-turbo

Package

Name: libjpeg62-turbo
Purl: purl:rpm/suse/libjpeg62-turbo&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-32bit": "62.2.0-31.14.2",
            "libjpeg8": "8.1.2-31.14.2",
            "libturbojpeg0": "8.1.2-31.14.2",
            "libjpeg62-turbo": "1.5.3-31.14.2",
            "libjpeg-turbo": "1.5.3-31.14.2",
            "libjpeg62": "62.2.0-31.14.2",
            "libjpeg8-32bit": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Desktop 12 SP4 / libjpeg-turbo

Package

Name: libjpeg-turbo
Purl: purl:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-32bit": "62.2.0-31.14.2",
            "libjpeg8": "8.1.2-31.14.2",
            "libturbojpeg0": "8.1.2-31.14.2",
            "libjpeg62-turbo": "1.5.3-31.14.2",
            "libjpeg-turbo": "1.5.3-31.14.2",
            "libjpeg62": "62.2.0-31.14.2",
            "libjpeg8-32bit": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Desktop 12 SP4 / libjpeg62-turbo

Package

Name: libjpeg62-turbo
Purl: purl:rpm/suse/libjpeg62-turbo&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-32bit": "62.2.0-31.14.2",
            "libjpeg8": "8.1.2-31.14.2",
            "libturbojpeg0": "8.1.2-31.14.2",
            "libjpeg62-turbo": "1.5.3-31.14.2",
            "libjpeg-turbo": "1.5.3-31.14.2",
            "libjpeg62": "62.2.0-31.14.2",
            "libjpeg8-32bit": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP3 / libjpeg-turbo

Package

Name: libjpeg-turbo
Purl: purl:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-devel": "62.2.0-31.14.2",
            "libjpeg8-devel": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP3 / libjpeg62-turbo

Package

Name: libjpeg62-turbo
Purl: purl:rpm/suse/libjpeg62-turbo&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-devel": "62.2.0-31.14.2",
            "libjpeg8-devel": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP4 / libjpeg-turbo

Package

Name: libjpeg-turbo
Purl: purl:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-devel": "62.2.0-31.14.2",
            "libjpeg8-devel": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Software Development Kit 12 SP4 / libjpeg62-turbo

Package

Name: libjpeg62-turbo
Purl: purl:rpm/suse/libjpeg62-turbo&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-devel": "62.2.0-31.14.2",
            "libjpeg8-devel": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP3 / libjpeg-turbo

Package

Name: libjpeg-turbo
Purl: purl:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-32bit": "62.2.0-31.14.2",
            "libjpeg8": "8.1.2-31.14.2",
            "libturbojpeg0": "8.1.2-31.14.2",
            "libjpeg62-turbo": "1.5.3-31.14.2",
            "libjpeg-turbo": "1.5.3-31.14.2",
            "libjpeg62": "62.2.0-31.14.2",
            "libjpeg8-32bit": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP3 / libjpeg62-turbo

Package

Name: libjpeg62-turbo
Purl: purl:rpm/suse/libjpeg62-turbo&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-32bit": "62.2.0-31.14.2",
            "libjpeg8": "8.1.2-31.14.2",
            "libturbojpeg0": "8.1.2-31.14.2",
            "libjpeg62-turbo": "1.5.3-31.14.2",
            "libjpeg-turbo": "1.5.3-31.14.2",
            "libjpeg62": "62.2.0-31.14.2",
            "libjpeg8-32bit": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP3 / libjpeg-turbo

Package

Name: libjpeg-turbo
Purl: purl:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-32bit": "62.2.0-31.14.2",
            "libjpeg8": "8.1.2-31.14.2",
            "libturbojpeg0": "8.1.2-31.14.2",
            "libjpeg62-turbo": "1.5.3-31.14.2",
            "libjpeg-turbo": "1.5.3-31.14.2",
            "libjpeg62": "62.2.0-31.14.2",
            "libjpeg8-32bit": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP3 / libjpeg62-turbo

Package

Name: libjpeg62-turbo
Purl: purl:rpm/suse/libjpeg62-turbo&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-32bit": "62.2.0-31.14.2",
            "libjpeg8": "8.1.2-31.14.2",
            "libturbojpeg0": "8.1.2-31.14.2",
            "libjpeg62-turbo": "1.5.3-31.14.2",
            "libjpeg-turbo": "1.5.3-31.14.2",
            "libjpeg62": "62.2.0-31.14.2",
            "libjpeg8-32bit": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP4 / libjpeg-turbo

Package

Name: libjpeg-turbo
Purl: purl:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-32bit": "62.2.0-31.14.2",
            "libjpeg8": "8.1.2-31.14.2",
            "libturbojpeg0": "8.1.2-31.14.2",
            "libjpeg62-turbo": "1.5.3-31.14.2",
            "libjpeg-turbo": "1.5.3-31.14.2",
            "libjpeg62": "62.2.0-31.14.2",
            "libjpeg8-32bit": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP4 / libjpeg62-turbo

Package

Name: libjpeg62-turbo
Purl: purl:rpm/suse/libjpeg62-turbo&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-32bit": "62.2.0-31.14.2",
            "libjpeg8": "8.1.2-31.14.2",
            "libturbojpeg0": "8.1.2-31.14.2",
            "libjpeg62-turbo": "1.5.3-31.14.2",
            "libjpeg-turbo": "1.5.3-31.14.2",
            "libjpeg62": "62.2.0-31.14.2",
            "libjpeg8-32bit": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP4 / libjpeg-turbo

Package

Name: libjpeg-turbo
Purl: purl:rpm/suse/libjpeg-turbo&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-32bit": "62.2.0-31.14.2",
            "libjpeg8": "8.1.2-31.14.2",
            "libturbojpeg0": "8.1.2-31.14.2",
            "libjpeg62-turbo": "1.5.3-31.14.2",
            "libjpeg-turbo": "1.5.3-31.14.2",
            "libjpeg62": "62.2.0-31.14.2",
            "libjpeg8-32bit": "8.1.2-31.14.2"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP4 / libjpeg62-turbo

Package

Name: libjpeg62-turbo
Purl: purl:rpm/suse/libjpeg62-turbo&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-31.14.2

Ecosystem specific

{
    "binaries": [
        {
            "libjpeg62-32bit": "62.2.0-31.14.2",
            "libjpeg8": "8.1.2-31.14.2",
            "libturbojpeg0": "8.1.2-31.14.2",
            "libjpeg62-turbo": "1.5.3-31.14.2",
            "libjpeg-turbo": "1.5.3-31.14.2",
            "libjpeg62": "62.2.0-31.14.2",
            "libjpeg8-32bit": "8.1.2-31.14.2"
        }
    ]
}