UbuntuUpdates.org

Package "libturbojpeg"

Name: libturbojpeg

Description:

IJG JPEG compliant runtime library.
Latest version: 1.4.2-0ubuntu3.4
Release: xenial (16.04)
Level: security
Repository: universe
Head package: libjpeg-turbo
Homepage: http://libjpeg-turbo.virtualgl.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libturbojpeg"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libturbojpeg" in Xenial

Repository Area Version
base universe 1.4.2-0ubuntu3
updates universe 1.4.2-0ubuntu3.4

Changelog

Version: 1.4.2-0ubuntu3.4 2020-06-09 19:06:35 UTC

  libjpeg-turbo (1.4.2-0ubuntu3.4) xenial-security; urgency=medium

  * SECURITY UPDATE: Heap-based buffer over-read
    - debian/patches/CVE-2020-13790.patch: fix buf overrun caused
      by bad binary PPM in rdppm.c.
    - CVE-2020-13790

 -- <email address hidden> (Leonidas S. Barbosa) Thu, 04 Jun 2020 13:35:57 -0300
Source diff to previous version
CVE-2020-13790 libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.

Version: 1.4.2-0ubuntu3.3 2019-11-13 16:07:10 UTC

  libjpeg-turbo (1.4.2-0ubuntu3.3) xenial-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-14498.patch: Fix OOB read
      caused by malformed 8-bit BMP in cderror.h, rdbmp.c, rdppm.c.
    - CVE-2018-14498
  * SECURITY UPDATE: Several integer overflow and subsequent
    segfaults
    - debian/patches/CVE-2019-2201.patch: properly handled
      gigapixel images in java/TJBench.java, tjbench.c,
      turbojpeg.c.
    - CVE-2019-2201

 -- <email address hidden> (Leonidas S. Barbosa) Tue, 12 Nov 2019 13:26:57 -0300
Source diff to previous version
CVE-2018-14498 get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer ov

Version: 1.4.2-0ubuntu3.1 2018-07-09 18:07:03 UTC

  libjpeg-turbo (1.4.2-0ubuntu3.1) xenial-security; urgency=medium

  * SECURITY UPDATE: division by zero via BMP image
    - debian/patches/CVE-2018-1152.patch: add size check in rdbmp.c.
    - CVE-2018-1152

 -- Marc Deslauriers <email address hidden> Thu, 05 Jul 2018 15:30:37 -0400
CVE-2018-1152 libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image.


About   -   Send Feedback to @ubuntu_updates