libjpeg-turbo-2.0.90-6.el9

エラータID: AXSA:2023-5197:01

Release date: 
Monday, March 6, 2023 - 12:48
Subject: 
libjpeg-turbo-2.0.90-6.el9
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.

Security Fix(es):

* libjpeg-turbo: heap buffer overflow in get_word_rgb_row() in rdppm.c (CVE-2021-46822)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2021-46822
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. libjpeg-turbo-2.0.90-6.el9.src.rpm
    MD5: 58fe8e13e53c9f31c6f5bdf3a3e097ed
    SHA-256: 1f5dc8147a50574753534fda7863b5c56bc08936f3784a6165c27462fe2fb924
    Size: 2.16 MB

Asianux Server 9 for x86_64
  1. libjpeg-turbo-2.0.90-6.el9.i686.rpm
    MD5: 830eb1ffa1e2f377ffb972da6b400d1f
    SHA-256: 8dabb8a5b6f4c9b857a32c0f49beb970f697d1a4fbed32044e027534e5ffbcce
    Size: 182.92 kB
  2. libjpeg-turbo-2.0.90-6.el9.x86_64.rpm
    MD5: 3c64e8748a4d6d05bcddc51e8cc2716a
    SHA-256: 9ba847fd0a2eb34b0965500237a6ad3624c6db5a6c8fe6e02d8ae3daffa4f413
    Size: 174.58 kB
  3. libjpeg-turbo-devel-2.0.90-6.el9.i686.rpm
    MD5: f478f9af5bcb256c5cfca994c0820e49
    SHA-256: 334b8fcc4b37f02cd5bcb33f34cbd251a4268e16e373f8e8b7470e95dbf29797
    Size: 98.61 kB
  4. libjpeg-turbo-devel-2.0.90-6.el9.x86_64.rpm
    MD5: 6d30810554c4662c55dafd6888f99f79
    SHA-256: 7a42b6af07ba5cf9905472e950f059699e2e19335d2eb29ede804fa46128e43d
    Size: 98.55 kB
  5. libjpeg-turbo-utils-2.0.90-6.el9.x86_64.rpm
    MD5: 5444f5bfb9785bd835a44c4ab35cde5e
    SHA-256: da767af3bbc5d18956465e62963cf1f8243f53163c7c0978780a3b1b1db9235b
    Size: 100.76 kB
  6. turbojpeg-2.0.90-6.el9.i686.rpm
    MD5: bfbf16ee847c96c83fd94f4b4a08ec81
    SHA-256: 6f8d0160825b0271546d35f473563392bf96d7a353ff1af14d5f187589363c37
    Size: 213.56 kB
  7. turbojpeg-2.0.90-6.el9.x86_64.rpm
    MD5: 798aec59b384487266c574f94098e287
    SHA-256: 4deff35e95382d158b9344e957ae4a6be8f62e1a8988a93870a0ad387bcaa98f
    Size: 204.12 kB
  8. turbojpeg-devel-2.0.90-6.el9.i686.rpm
    MD5: 7b1f457ffc75e31c14285c9a5d94b3d6
    SHA-256: 4f4263a55a83760f61c2385a1292f9e0c2df7a7da6991a222ea46252dbbb621c
    Size: 24.38 kB
  9. turbojpeg-devel-2.0.90-6.el9.x86_64.rpm
    MD5: 58200a43e6799612ea285e7c73e26eb6
    SHA-256: 153ad5c8b335c732dfcf964e6a3b89fa2471649f9c42ae9824e96c56fcaf1ad0
    Size: 24.38 kB