libjpeg-turbo-1.5.3-12.el8

The libjpeg-turbo packages contain a library of functions for manipulating JPEG
images. They also contain simple client programs for accessing the libjpeg
functions. These packages provide the same functionality and API as libjpeg but
with better performance.

Security Fix(es):

* libjpeg-turbo: Stack-based buffer overflow in the "transform" component
(CVE-2020-17541)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVE-2020-17541
Libjpeg-turbo all version have a stack-based buffer overflow in the "transform"
component. A remote attacker can send a malformed jpeg file to the service and
cause arbitrary code execution or denial of service of the target service.