[CLSA-2026:1794006110] libjpeg-turbo: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-06 23:02:01 UTC
Description:
- CVE-2020-13790: fix heap buffer over-read in rdppm.c with a crafted binary PPM/PGM file (with upstream 6709e4a0 and 1e81b0c3: range-check text PPM/PGM samples and 16-bit binary words against maxval; also CVE-2016-3616, CVE-2018-11213, CVE-2018-11214) - CVE-2020-17541: fix stack buffer overflow in the Huffman encoder local buffer
Updated packages:
  • libjpeg-turbo-1.2.1-3.el6_5.tuxcare.els1.i686.rpm
    sha:0e3e49ca955d35680b01f6a3466d323dbfa94c7c2b4058de937614fa6fa53c8b
  • libjpeg-turbo-1.2.1-3.el6_5.tuxcare.els1.x86_64.rpm
    sha:1b7749468264baf96989446681cfd23783846841ac6d71b53a79ba22581a31ef
  • libjpeg-turbo-devel-1.2.1-3.el6_5.tuxcare.els1.i686.rpm
    sha:b9e18b5a6f6fc4caf3c1377665b197870f507c48ffabe98fb1b226b8f3b9fef3
  • libjpeg-turbo-devel-1.2.1-3.el6_5.tuxcare.els1.x86_64.rpm
    sha:e9b2796747c5552aa74f0b9ca69b220464303aa3565e72808a802ebd3d780d1b
  • libjpeg-turbo-static-1.2.1-3.el6_5.tuxcare.els1.i686.rpm
    sha:6368f63cb80dbcb310cc32ce8cb188d0bbacabc1931ae94b9bbd81c37a0c68c4
  • libjpeg-turbo-static-1.2.1-3.el6_5.tuxcare.els1.x86_64.rpm
    sha:3a2c1e6e9eea1dbbbfedee81a9fb42e2914bdf8773bba9237fa1753e2dff3290
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.