CVE-2021-29390
Fixed in a distro release EPSS <1%
libjpeg-turbo version 2.0.90 has a heap-based buffer over-read (2 bytes) in decompress_smooth_data in jdcoefct.c.
Products: libjpeg-turbo, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | libjpeg-turbo | 2.0.90-7.el9 |
| AlmaLinux 9 | libjpeg-turbo-devel | 2.0.90-7.el9 |
| AlmaLinux 9 | libjpeg-turbo-utils | 2.0.90-7.el9 |
| AlmaLinux 9 | turbojpeg | 2.0.90-7.el9 |
| AlmaLinux 9 | turbojpeg-devel | 2.0.90-7.el9 |
| Amazon Linux 2 | libjpeg-turbo | 2.0.90-2.amzn2.0.6 |
| Amazon Linux 2 | libjpeg-turbo-devel | 2.0.90-2.amzn2.0.6 |
| Amazon Linux 2 | libjpeg-turbo-utils | 2.0.90-2.amzn2.0.6 |
| Amazon Linux 2 | turbojpeg | 2.0.90-2.amzn2.0.6 |
| Amazon Linux 2 | turbojpeg-devel | 2.0.90-2.amzn2.0.6 |
| Red Hat Enterprise Linux 9 | libjpeg-turbo | 0:2.0.90-7.el9 |
| Red Hat Enterprise Linux 9 | libjpeg-turbo-debuginfo | 0:2.0.90-7.el9 |
| Red Hat Enterprise Linux 9 | libjpeg-turbo-debugsource | 0:2.0.90-7.el9 |
| Red Hat Enterprise Linux 9 | libjpeg-turbo-devel | 0:2.0.90-7.el9 |
| Red Hat Enterprise Linux 9 | libjpeg-turbo-utils | 0:2.0.90-7.el9 |
| Red Hat Enterprise Linux 9 | libjpeg-turbo-utils-debuginfo | 0:2.0.90-7.el9 |
| Red Hat Enterprise Linux 9 | turbojpeg | 0:2.0.90-7.el9 |
| Red Hat Enterprise Linux 9 | turbojpeg-debuginfo | 0:2.0.90-7.el9 |
| Red Hat Enterprise Linux 9 | turbojpeg-devel | 0:2.0.90-7.el9 |
| Rocky Linux 9 | libjpeg-turbo | 0:2.0.90-7.el9 |