<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 04:12:56 +0000</lastBuildDate>
    <item>
      <title>ALSA-2025:7540 — Moderate: libjpeg-turbo security update</title>
      <link>https://cve.radiocsirt.org/vuln/alsa-2025:7540</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:8: libjpeg-turbo, AlmaLinux:8: libjpeg-turbo-devel, AlmaLinux:8: libjpeg-turbo-utils, AlmaLinux:8: turbojpeg, AlmaLinux:8: turbojpeg-devel&lt;/p&gt;
&lt;p&gt;The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c (CVE-2020-13790)&lt;/p&gt;
&lt;p&gt;For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:8: libjpeg-turbo, AlmaLinux:8: libjpeg-turbo-devel, AlmaLinux:8: libjpeg-turbo-utils, AlmaLinux:8: turbojpeg, AlmaLinux:8: turbojpeg-devel&lt;/p&gt;
&lt;p&gt;The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c (CVE-2020-13790)&lt;/p&gt;
&lt;p&gt;For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/alsa-2025:7540</guid>
    </item>
    <item>
      <title>bdu:2021-01352</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2021-01352</link>
      <description>bdu:2021-01352</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2021-01352</guid>
    </item>
    <item>
      <title>Withdrawn: BELL-CVE-2020-13790 — CVE-2020-13790 does not affect BellSoft software</title>
      <link>https://cve.radiocsirt.org/vuln/bell-cve-2020-13790</link>
      <description>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bell-cve-2020-13790</guid>
    </item>
    <item>
      <title>certfr-2025-avi-0530 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2025-avi-0530</link>
      <description>certfr-2025-avi-0530</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2025-avi-0530</guid>
    </item>
    <item>
      <title>cnvd-2021-31261</title>
      <link>https://cve.radiocsirt.org/vuln/cnvd-2021-31261</link>
      <description>cnvd-2021-31261</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cnvd-2021-31261</guid>
    </item>
    <item>
      <title>EUVD-2026-41997</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-41997</link>
      <description>EUVD-2026-41997</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-41997</guid>
    </item>
    <item>
      <title>fkie_cve-2020-13790</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2020-13790</link>
      <description>&lt;p&gt;libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2020-13790</guid>
    </item>
    <item>
      <title>GHSA-3rgw-2fpg-85mq</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-3rgw-2fpg-85mq</link>
      <description>&lt;p&gt;libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-3rgw-2fpg-85mq</guid>
    </item>
    <item>
      <title>gsd-2020-13790</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2020-13790</link>
      <description>gsd-2020-13790</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2020-13790</guid>
    </item>
    <item>
      <title>openSUSE-SU-2020:1413-1 — Security update for libjpeg-turbo</title>
      <link>https://cve.radiocsirt.org/vuln/opensuse-su-2020:1413-1</link>
      <description>&lt;p&gt;Security update for libjpeg-turbo&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for libjpeg-turbo&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/opensuse-su-2020:1413-1</guid>
    </item>
    <item>
      <title>SUSE-SU-2020:2569-1 — Security update for libjpeg-turbo</title>
      <link>https://cve.radiocsirt.org/vuln/suse-su-2020:2569-1</link>
      <description>&lt;p&gt;Security update for libjpeg-turbo&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for libjpeg-turbo&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/suse-su-2020:2569-1</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2020-13790</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13790</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:14.04:LTS: libjpeg-turbo, Ubuntu:16.04:LTS: libjpeg-turbo, Ubuntu:18.04:LTS: libjpeg-turbo, Ubuntu:20.04:LTS: libjpeg-turbo&lt;/p&gt;
&lt;p&gt;libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:14.04:LTS: libjpeg-turbo, Ubuntu:16.04:LTS: libjpeg-turbo, Ubuntu:18.04:LTS: libjpeg-turbo, Ubuntu:20.04:LTS: libjpeg-turbo&lt;/p&gt;
&lt;p&gt;libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13790</guid>
    </item>
    <item>
      <title>WID-SEC-W-2025-1020 — Red Hat Enterprise Linux (libjpeg-turbo): Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1020</link>
      <description>&lt;p&gt;Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (libjpeg-turbo) ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (libjpeg-turbo) ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1020</guid>
    </item>
  </channel>
</rss>
