Updated libjpeg packages fix security vulnerability

🗓️ 19 Jun 2020 10:25:21Reported by Gentoo FoundationType

Updated libjpeg packages fix heap-based buffer over-read vulnerability in get_rgb_row() via malformed PPM input file (CVE-2020-13790

Reporter	Title	Published	Views	Family All 107
FreeBSD	mozjpeg -- heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file	3 Jun 202000:00	–	freebsd
FreeBSD	libjpeg-turbo -- Issue in the PPM reader causing a buffer overrun in cjpeg, TJBench, or the tjLoadImage() function.	3 Jun 202000:00	–	freebsd
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for July 2025.	7 Aug 202508:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	25 Jun 202513:52	–	ibm
IBM Security Bulletins	Security Bulletin: WML CE: libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read	17 Jul 202022:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Netcool Operations Insights.	20 Nov 202516:20	–	ibm
Tenable Nessus	AlmaLinux 8 : libjpeg-turbo (ALSA-2025:7540)	11 Jun 202500:00	–	nessus
Tenable Nessus	Debian DLA-2302-1 : libjpeg-turbo security update	3 Aug 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : libjpeg-turbo (EulerOS-SA-2020-1810)	30 Jul 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : libjpeg-turbo (EulerOS-SA-2020-1910)	28 Aug 202000:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	7	any	libjpeg	2.0.4-1.1	libjpeg-2.0.4-1.1.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
usn	www.usn.ubuntu.com/usn/usn-4386-1

19 Jun 2020 10:25Current

3.6Low risk

Vulners AI Score3.6

CVSS 25.8

CVSS 3.18.1

EPSS0.03178