openSUSE-SU-2019:1118-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:1118-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/openSUSE-SU-2019:1118-1

Upstream

CVE (3)

Related

CVE (3)

Published

2019-04-02T11:05:26Z

Modified

2026-03-11T07:32:04Z

Summary

Security update for libjpeg-turbo

Details

This update for libjpeg-turbo fixes the following issues:

The following security vulnerabilities were addressed:

CVE-2018-14498: Fixed a heap-based buffer over read in get_8bit_row function which could allow to an attacker to cause denial of service (bsc#1128712).
CVE-2018-11813: Fixed the end-of-file mishandling in read_pixel in rdtarga.c, which allowed remote attackers to cause a denial-of-service via crafted JPG files due to a large loop (bsc#1096209)
CVE-2018-1152: Fixed a denial of service in start_input_bmp() rdbmp.c caused by a divide by zero when processing a crafted BMP image (bsc#1098155)

This update was imported from the SUSE:SLE-15:Update update project.

References

Affected packages

openSUSE:Leap 15.0 / libjpeg-turbo

Package

Name: libjpeg-turbo
Purl: pkg:rpm/opensuse/libjpeg-turbo&distro=openSUSE%20Leap%2015.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.5.3-lp150.4.3.2

Ecosystem specific

{
    "binaries":  [
        {
            "libjpeg-turbo":  "1.5.3-lp150.4.3.2",
            "libjpeg62":  "62.2.0-lp150.4.3.2",
            "libjpeg62-32bit":  "62.2.0-lp150.4.3.2",
            "libjpeg62-devel":  "62.2.0-lp150.4.3.2",
            "libjpeg62-devel-32bit":  "62.2.0-lp150.4.3.2",
            "libjpeg62-turbo":  "1.5.3-lp150.4.3.2",
            "libjpeg8":  "8.1.2-lp150.4.3.2",
            "libjpeg8-32bit":  "8.1.2-lp150.4.3.2",
            "libjpeg8-devel":  "8.1.2-lp150.4.3.2",
            "libjpeg8-devel-32bit":  "8.1.2-lp150.4.3.2",
            "libturbojpeg0":  "8.1.2-lp150.4.3.2",
            "libturbojpeg0-32bit":  "8.1.2-lp150.4.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:1118-1.json"

openSUSE:Leap 15.0 / libjpeg62-turbo

Package

Name: libjpeg62-turbo
Purl: pkg:rpm/opensuse/libjpeg62-turbo&distro=openSUSE%20Leap%2015.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.5.3-lp150.4.3.2

Ecosystem specific

{
    "binaries":  [
        {
            "libjpeg-turbo":  "1.5.3-lp150.4.3.2",
            "libjpeg62":  "62.2.0-lp150.4.3.2",
            "libjpeg62-32bit":  "62.2.0-lp150.4.3.2",
            "libjpeg62-devel":  "62.2.0-lp150.4.3.2",
            "libjpeg62-devel-32bit":  "62.2.0-lp150.4.3.2",
            "libjpeg62-turbo":  "1.5.3-lp150.4.3.2",
            "libjpeg8":  "8.1.2-lp150.4.3.2",
            "libjpeg8-32bit":  "8.1.2-lp150.4.3.2",
            "libjpeg8-devel":  "8.1.2-lp150.4.3.2",
            "libjpeg8-devel-32bit":  "8.1.2-lp150.4.3.2",
            "libturbojpeg0":  "8.1.2-lp150.4.3.2",
            "libturbojpeg0-32bit":  "8.1.2-lp150.4.3.2"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2019:1118-1.json"