libjpeg-turbo-2.0.90-7.el9

エラータID: AXSA:2024-7920:01

Release date: 
Thursday, May 30, 2024 - 12:47
Subject: 
libjpeg-turbo-2.0.90-7.el9
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.

Security Fix(es):

* libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c (CVE-2021-29390)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the MIRACLE LINUX 9.4 Release Notes linked from the References section.

CVE-2021-29390
libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.

Solution: 

Update packages.

CVEs: 
CVE-2021-29390
libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.
Additional Info: 

N/A

Download: 

SRPMS
  1. libjpeg-turbo-2.0.90-7.el9.src.rpm
    MD5: 2d003ea968f147eb0aa48d8bee9a4452
    SHA-256: 57af475bce89643939cd21a0f9ef1973677b73caadd00b0306530b6d1f98cbb9
    Size: 2.16 MB

Asianux Server 9 for x86_64
  1. libjpeg-turbo-2.0.90-7.el9.i686.rpm
    MD5: a0728120531b5345d25d8077807df5aa
    SHA-256: 4d4a893955ef0ab8dea764e684516475215ef66214d584d5ecc52edbfc5c8774
    Size: 182.19 kB
  2. libjpeg-turbo-2.0.90-7.el9.x86_64.rpm
    MD5: 7813280b119e353b928f557efde47302
    SHA-256: e9f82cc2bdcecbf273a559171a27fa61ec226d42f7c7afdde088191425b292c9
    Size: 173.74 kB
  3. libjpeg-turbo-devel-2.0.90-7.el9.i686.rpm
    MD5: fa98e94f4b05d563f16e2745f0c08d81
    SHA-256: 8ddc53f09a5b5c22787c3833b1a09f4ac87c3c0d507a095e3e3764d067226f71
    Size: 97.67 kB
  4. libjpeg-turbo-devel-2.0.90-7.el9.x86_64.rpm
    MD5: 3d80b62502bf316c581fa2a9aa15de90
    SHA-256: 1d54cbf76188e5a02325301f1d5cbc6d5f95cd6f5eb52b183277335bf1bdff37
    Size: 97.66 kB
  5. libjpeg-turbo-utils-2.0.90-7.el9.x86_64.rpm
    MD5: 229f452efd555b0db3f98fcab7737337
    SHA-256: ec5d8bc80e08deac1433264d3c7f8d409f590ea8ca86f0cdb477892e32336f10
    Size: 100.72 kB
  6. turbojpeg-2.0.90-7.el9.i686.rpm
    MD5: ecc1129d389afa04cea1472aac91d364
    SHA-256: 8ca9a8a09aee74cf61238faac6044c1cf2b7ec4fd134c7504a099be0fd5e3b66
    Size: 212.71 kB
  7. turbojpeg-2.0.90-7.el9.x86_64.rpm
    MD5: 8652e3242b8e5d5826540e9e6508e782
    SHA-256: edbc0b664374c15bd2d5f72efc88c9a507957f79993d2246cbe868c33d54f335
    Size: 203.37 kB
  8. turbojpeg-devel-2.0.90-7.el9.i686.rpm
    MD5: c876a3fbe10a55f064fe6100662420c0
    SHA-256: ecc448928480222d2ee8234929036d7d8a1ceb113b25c3f2835980babd9e22a2
    Size: 23.39 kB
  9. turbojpeg-devel-2.0.90-7.el9.x86_64.rpm
    MD5: 60177f2bd8407783c5f5da7f41a01316
    SHA-256: 3aa2dc0886992dc9735ec3cb89b3d5c9713701a80b54398a5952f01257d53573
    Size: 23.38 kB