SUSE SLED12 / SLES12 Security Update : libjpeg-turbo (SUSE-SU-2019:1111-1)

This update for libjpeg-turbo fixes the following issues : The following security vulnerabilities were addressed : CVE-2018-14498: Fixed a heap-based buffer over read in get8bitrow function which could allow to an attacker to cause denial of service bsc1128712. CVE-2018-11813: Fixed the end-of-fi...

EulerOS 2.0 SP2 : libjpeg-turbo (EulerOS-SA-2019-1305)

According to the version of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A divide by zero vulnerability has been discovered in libjpeg-turbo in allocsarray function of jmemmgr.c file. An attacker could use this...

SUSE-SU-2019:1111-1 Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-14498: Fixed a heap-based buffer over read in get8bitrow function which could allow to an attacker to cause denial of service bsc1128712. - CVE-2018-11813: Fixed the...

Amazon Linux 2 : libjpeg-turbo (ALAS-2019-1198)

A divide by zero vulnerability has been discovered in libjpeg-turbo in allocsarray function of jmemmgr.c file. An attacker could use this vulnerability to cause a denial of service via a crafted file.CVE-2018-11212 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Low: libjpeg-turbo

Issue Overview: A divide by zero vulnerability has been discovered in libjpeg-turbo in allocsarray function of jmemmgr.c file. An attacker could use this vulnerability to cause a denial of service via a crafted file.CVE-2018-11212 Affected Packages: libjpeg-turbo Note: This advisory is applicable...

EulerOS Virtualization 2.5.3 : libjpeg-turbo (EulerOS-SA-2019-1159)

According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - libjpeg 9c has a large loop because readpixel in rdtarga.c mishandles EOF.i1/4^CVE-2018-11813i1/4%0 Note that Tenable Network...

MGASA-2019-0132 Updated libjpeg packages fix security vulnerability

get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries...

Updated libjpeg packages fix security vulnerability

get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries...

openSUSE: Security Advisory for libjpeg-turbo (openSUSE-SU-2019:1118-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for libjpeg-turbo FEDORA-2019-87e2fa8e0f

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : libjpeg-turbo (openSUSE-2019-1118)

This update for libjpeg-turbo fixes the following issues : The following security vulnerabilities were addressed : - CVE-2018-14498: Fixed a heap-based buffer over read in get8bitrow function which could allow to an attacker to cause denial of service bsc1128712. - CVE-2018-11813: Fixed the...

Security update for libjpeg-turbo (moderate)

openSUSE Security Update: Security update for libjpeg-turbo Announcement ID: openSUSE-SU-2019:1118-1 Rating: moderate References: 1096209 1098155 1128712 Cross-References: CVE-2018-1152 CVE-2018-11813 CVE-2018-14498 Affected Products: openSUSE Leap 15.0 An update that fixes three vulnerabilities ...

[SECURITY] Fedora 28 Update: libjpeg-turbo-1.5.3-7.fc28

The libjpeg-turbo package contains a library of functions for manipulating JPEG images...

Fedora 28 : libjpeg-turbo (2019-87e2fa8e0f)

Fix for CVE-2018-14498 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...

RHEL 6 : java-1.8.0-ibm (RHSA-2019:0640)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0640 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE ...

libjpeg-turbo: Divide By Zero in alloc_sarray function in jmemmgr.c

A divide by zero vulnerability has been discovered in libjpeg-turbo in allocsarray function of jmemmgr.c file. An attacker could use this vulnerability to cause a denial of service via a crafted file...

SUSE SLED15 / SLES15 Security Update : libjpeg-turbo (SUSE-SU-2019:0711-1)

This update for libjpeg-turbo fixes the following issues : The following security vulnerabilities were addressed : CVE-2018-14498: Fixed a heap-based buffer over read in get8bitrow function which could allow to an attacker to cause denial of service bsc1128712. CVE-2018-11813: Fixed the end-of-fi...

SUSE-SU-2019:0711-1 Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-14498: Fixed a heap-based buffer over read in get8bitrow function which could allow to an attacker to cause denial of service bsc1128712. - CVE-2018-11813: Fixed the...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, Platform HPC, and Spectrum Cluster Foundation.

Summary There are multiple vulnerabilities in IBM®Runtime Environment Java™Version 6 and 7 used by IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, Platform HPC, and Spectrum Cluster Foundation. These issues were disclosed as part of the IBM Java SDK...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Spectrum LSF Analytics

Summary There are multiple vulnerabilities in IBM®Runtime Environment Java™Version 7 used by IBM Spectrum LSF Analytics. These issues were disclosed as part of the IBM Java SDK updates in January 2019. Vulnerability Details CVEID: CVE-2018-11212 DESCRIPTION: libjpeg is vulnerable to a denial of...