[ALSA-2025:7540] Moderate: libjpeg-turbo security update
Type:
security
Severity:
moderate
Release date:
2025-06-10
Description:
The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Security Fix(es): * libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c (CVE-2020-13790) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 libjpeg-turbo-utils-1.5.3-14.el8_10.aarch64.rpm 6d3942216eceaa62ec5cbc63a6415cd43a55ea01e634f4acaa4eb2674be85ca1
aarch64 turbojpeg-devel-1.5.3-14.el8_10.aarch64.rpm 90f21d8004029a96c5174b8de655e5237f12b6723dd3a5c152438d9665037c0c
aarch64 libjpeg-turbo-devel-1.5.3-14.el8_10.aarch64.rpm b2017ed74e7a4f88cb5ebd026c79742a8cebe679269cbf154fb59fbdf247e136
aarch64 turbojpeg-1.5.3-14.el8_10.aarch64.rpm bec7596196e2876af7ba5606b443a565c90f14d36e1749173706d645d2a7fb45
aarch64 libjpeg-turbo-1.5.3-14.el8_10.aarch64.rpm f2ddec643f751766be22d09689719f2d84d677b6e8387644ef798de4bfd71447
i686 libjpeg-turbo-1.5.3-14.el8_10.i686.rpm 52929ebe83b87e3da227e548350c852bce7d48af2561818fe3be058d256714ae
i686 turbojpeg-1.5.3-14.el8_10.i686.rpm 68db24cdaf1b5fd96e6bbd98ccd77105b4f5636cddd62bec2e150f151a02155e
i686 turbojpeg-devel-1.5.3-14.el8_10.i686.rpm 995f95ac7e6c333f59f74b2ba4b5e4e53d4d04e5620e6d16d5ee0d449a41c22d
i686 libjpeg-turbo-devel-1.5.3-14.el8_10.i686.rpm d84cf806bfbbea4c3fe3ba93b687d81faf8869798f3701ce252c3f4b56e58f94
ppc64le turbojpeg-devel-1.5.3-14.el8_10.ppc64le.rpm 46bb1834300d56c1d59d988f9856a0a879839aad89774752f897bfeafee01fc2
ppc64le libjpeg-turbo-utils-1.5.3-14.el8_10.ppc64le.rpm 587ccda1b3b7ffb6cd45e6bd6aca874382d0e2117eda11646b6eeb1b36ff9f05
ppc64le libjpeg-turbo-1.5.3-14.el8_10.ppc64le.rpm 69a1ebc6b9aa3dc3ea3d8522a982869e8f1cd7ff3791d239bd1bde97d00f07da
ppc64le turbojpeg-1.5.3-14.el8_10.ppc64le.rpm 727fa01139eae5214ca709ba95d62ffc929e708348d65316b2aad35cf94b1e3d
ppc64le libjpeg-turbo-devel-1.5.3-14.el8_10.ppc64le.rpm 95b51b27e52f26cc2dd67bd97cbedac533a3ca30842fb013c8d6c47cf648cc6e
s390x turbojpeg-1.5.3-14.el8_10.s390x.rpm 29781ddf5042597d628e10ad4203472dd2e411d97bda2dab23d1ec889e7218d5
s390x libjpeg-turbo-utils-1.5.3-14.el8_10.s390x.rpm 3427a3e3707d3817aad104ec7ac6bfa91506ac641ad2b17491912b02c15655b9
s390x turbojpeg-devel-1.5.3-14.el8_10.s390x.rpm 54c65ddac699571d9dc13341a8bc4003f7fac210c1dfa549f91900f43d84f776
s390x libjpeg-turbo-devel-1.5.3-14.el8_10.s390x.rpm 7d326aa74da4f433b26c10e88de43f97328aefdac682d48400a61f600965bb98
s390x libjpeg-turbo-1.5.3-14.el8_10.s390x.rpm d9e1f0584fe1e1833c6a01cc3fa2d5e45a2dd15d11a3b4006c0d270c31b65263
x86_64 libjpeg-turbo-devel-1.5.3-14.el8_10.x86_64.rpm 0baed41ced3fdba72775f1798aaac22fd42e18ec960b0ecb920cc6ffc35d563f
x86_64 turbojpeg-devel-1.5.3-14.el8_10.x86_64.rpm 2839b75abadacb3a1cc61c156faf52f89794cd6c794a3e860e1cc35a0da1fa8f
x86_64 turbojpeg-1.5.3-14.el8_10.x86_64.rpm 56353bf853e61814519a7dee167a46db5bd5fcd897b4e92cfb7889bdf9634e6d
x86_64 libjpeg-turbo-utils-1.5.3-14.el8_10.x86_64.rpm 6ca84e33901ec78434ad9b1a27cc32678af05f9b81e704d9fe025c4f5a96eff9
x86_64 libjpeg-turbo-1.5.3-14.el8_10.x86_64.rpm e96007853de744b028b0ae0b53d66ccb4db532ad3814fa6cfa3185a9cd079c5d
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.