[ubuntu/bionic-updates] libjpeg-turbo 1.5.2-0ubuntu5.18.04.6 (Accepted)

[Ubuntu Archive Robot]

libjpeg-turbo (1.5.2-0ubuntu5.18.04.6) bionic-security; urgency=medium

  * SECURITY UPDATE: large loop because read_pixel mishandles EOF
    - debian/patches/CVE-2018-11813.patch: fix read handling in rdtarga.c.
    - CVE-2018-11813
  * SECURITY UPDATE: stack-based buffer overflow in the "transform"
    component
    - debian/patches/CVE-2020-17541.patch: fix very rare local buffer
      overrun in jchuff.c.
    - CVE-2020-17541
  * SECURITY UPDATE: null pointer dereference
    - debian/patches/CVE-2020-35538-pre1.patch: fix jpeg_skip_scanlines()
      segfault w/merged upsamp in jdapistd.c.
    - debian/patches/CVE-2020-35538.patch: fix jpeg_skip_scanlines()
      segfault w/merged upsamp in jdapistd.c, jdmerge.c, jdmerge.h,
      jdmrg565.c, jdmrgext.c.
    - debian/patches/CVE-2020-35538-2.patch: further jpeg_skip_scanlines()
      fixes in CMakeLists.txt, croptest.in, jdapistd.c.
    - CVE-2020-35538

Date: 2022-09-22 15:11:16.729761+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/libjpeg-turbo/1.5.2-0ubuntu5.18.04.6
-------------- next part --------------
Sorry, changesfile not available.