Security update for libjpeg-turbo (important)

2019-11-1900:00:00

lists.opensuse.org

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

JSON

An update that fixes one vulnerability is now available.

Description:

This update for libjpeg-turbo fixes the following issues:

CVE-2019-2201: Several integer overflow issues and subsequent segfaults
occurred in libjpeg-turbo, when attempting to compress or decompress
gigapixel images. [bsc#1156402]

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

openSUSE Leap 15.0:

zypper in -t patch openSUSE-2019-2530=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.0i586< - openSUSE Leap 15.0 (i586 x86_64):- openSUSE Leap 15.0 (i586 x86_64):.i586.rpm
openSUSE Leap15.0x86_64< - openSUSE Leap 15.0 (i586 x86_64):- openSUSE Leap 15.0 (i586 x86_64):.x86_64.rpm
openSUSE Leap15.0x86_64< - openSUSE Leap 15.0 (x86_64):- openSUSE Leap 15.0 (x86_64):.x86_64.rpm

OS	Version	Architecture	Version	Filename
openSUSE Leap	15.0	i586	< - openSUSE Leap 15.0 (i586 x86_64):	- openSUSE Leap 15.0 (i586 x86_64):.i586.rpm
openSUSE Leap	15.0	x86_64	< - openSUSE Leap 15.0 (i586 x86_64):	- openSUSE Leap 15.0 (i586 x86_64):.x86_64.rpm
openSUSE Leap	15.0	x86_64	< - openSUSE Leap 15.0 (x86_64):	- openSUSE Leap 15.0 (x86_64):.x86_64.rpm