Ubuntu
libjpeg-turbo package

libjpeg-turbo 2.0.3-0ubuntu1.20.04.3 source package in Ubuntu

Changelog

libjpeg-turbo (2.0.3-0ubuntu1.20.04.3) focal-security; urgency=medium

  * SECURITY UPDATE: stack-based buffer overflow in the "transform"
    component
    - debian/patches/CVE-2020-17541.patch: fix very rare local buffer
      overrun in jchuff.c.
    - CVE-2020-17541
  * SECURITY UPDATE: null pointer dereference
    - debian/patches/CVE-2020-35538.patch: fix jpeg_skip_scanlines()
      segfault w/merged upsamp in jdapistd.c, jdmerge.c, jdmerge.h,
      jdmrg565.c, jdmrgext.c.
    - debian/patches/CVE-2020-35538-2.patch: further jpeg_skip_scanlines()
      fixes in CMakeLists.txt, croptest.in, jdapistd.c.
    - CVE-2020-35538
  * SECURITY UPDATE: heap-based buffer overflow
    - debian/patches/CVE-2021-46822.patch: fix issues w/loading 16-bit
      PPMs/PGMs in rdppm.c.
    - CVE-2021-46822

 -- Marc Deslauriers <email address hidden>  Wed, 21 Sep 2022 13:54:13 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
graphics
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates main graphics
Focal security main graphics

Downloads

File Size SHA-256 Checksum
libjpeg-turbo_2.0.3.orig.tar.gz 2.1 MiB a69598bf079463b34d45ca7268462a18b6507fdaa62bb1dfd212f02041499b5d
libjpeg-turbo_2.0.3-0ubuntu1.20.04.3.debian.tar.xz 25.7 KiB a2f60c2ca1c5bdf927f574e329f2dc69deda913f762642438ae0df604726bd1d
libjpeg-turbo_2.0.3-0ubuntu1.20.04.3.dsc 2.3 KiB ec264b25c5242eab9f6bfaccec9516f1694f8eaa672383e0dc33d4e7e9a427d2

View changes file

Binary packages built by this source

libjpeg-turbo-progs: Programs for manipulating JPEG files

 This package contains programs for manipulating JPEG files:
  cjpeg/djpeg: convert to/from the JPEG file format
  rdjpgcom/wrjpgcom: read/write comments in JPEG files
  jpegtran: lossless transformations of JPEG files
  tjbench: a simple JPEG benchmarking tool

libjpeg-turbo-progs-dbgsym: debug symbols for libjpeg-turbo-progs
libjpeg-turbo-test: Program for benchmarking and testing libjpeg-turbo

 This package contains tjunittest and tjbench. tjunittest tests the basic
 functionality of the library and data files for performing those tests.
 tjbench runs some benchmarks.

libjpeg-turbo-test-dbgsym: debug symbols for libjpeg-turbo-test
libjpeg-turbo8: IJG JPEG compliant runtime library.

 Runtime library supporting the Independent JPEG Group's standard
 for JPEG files.
 .
 This package contains the shared library which is a drop in
 replacement for libjpeg8, which has better performance than
 standard libjpeg by use of SIMD and other optimizations.

libjpeg-turbo8-dbg: Debugging symbols for the libjpeg-turbo library

 An optimized implementation of the Independent JPEG Group's
 JPEG library is a library for handling JPEG files.
 .
 This package contains the debugging symbols for libjpeg-turbo.

libjpeg-turbo8-dev: Development files for the IJG JPEG library

 The Independent JPEG Group's JPEG library is a library for handling
 JPEG files.
 .
 This package contains the static library, headers and documentation.

libturbojpeg: IJG JPEG compliant runtime library.

 Runtime library supporting the Independent JPEG Group's standard
 for JPEG files.
 .
 This package contains the libturbojpeg.so library, used by
 turboVNC and other users of the past TurboJPEG library.

libturbojpeg-dbgsym: debug symbols for libturbojpeg
libturbojpeg0-dev: Development files for the TurboJPEG library

 The libjpeg-turbo JPEG library is a library for handling JPEG files.
 .
 libjpeg-turbo is a JPEG image codec that uses SIMD instructions (MMX,
 SSE2, NEON) to accelerate baseline JPEG compression and decompression
 on x86, x86-64, and ARM systems.
 .
 This package contains the static library, headers and documentation for
 the TurboJPEG library.