Most recent entries from all

ALSA-2024:2295 — Moderate: libjpeg-turbo security update

Affected: AlmaLinux:9: libjpeg-turbo, AlmaLinux:9: libjpeg-turbo-devel, AlmaLinux:9: libjpeg-turbo-utils, AlmaLinux:9: turbojpeg, AlmaLinux:9: turbojpeg-devel

The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance.

Security Fix(es):

* libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c (CVE-2021-29390)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2025-16160

certfr-2026-avi-0218 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq…

certfr-2026-avi-0218

EUVD-2026-192445

fkie_cve-2021-29390

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.

GHSA-3f9q-r2pw-87vm

libjpeg-turbo version 2.0.90 is vulnerable to a heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c.

gsd-2021-29390

RHSA-2024:2295 — Red Hat Security Advisory: libjpeg-turbo security update

libjpeg-turbo: heap-buffer-overflow vulnerability in decompress_smooth_data in jdcoefct.c

Withdrawn: UBUNTU-CVE-2021-29390

Withdrawn by the publisher.

Affected: Ubuntu:22.04:LTS: libjpeg-turbo, Ubuntu:24.04:LTS: libjpeg-turbo

libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.

WID-SEC-W-2024-0995 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder seine Privilegien zu erweitern.