Security update for libjpeg-turbo SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:1111-1 Final 1 1 2019-04-30T10:59:46Z current 2019-04-30T10:59:46Z 2019-04-30T10:59:46Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libjpeg-turbo This update for libjpeg-turbo fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-14498: Fixed a heap-based buffer over read in get_8bit_row function which could allow to an attacker to cause denial of service (bsc#1128712). - CVE-2018-11813: Fixed the end-of-file mishandling in read_pixel in rdtarga.c, which allowed remote attackers to cause a denial-of-service via crafted JPG files due to a large loop (bsc#1096209) - CVE-2018-1152: Fixed a denial of service in start_input_bmp() rdbmp.c caused by a divide by zero when processing a crafted BMP image (bsc#1098155) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/nginx-ingress-controller:beta1-2019-1111,Image SLES12-SP5-Azure-SAP-BYOS-2019-1111,Image SLES12-SP5-Azure-SAP-On-Demand-2019-1111,Image SLES12-SP5-EC2-SAP-BYOS-2019-1111,Image SLES12-SP5-EC2-SAP-On-Demand-2019-1111,Image SLES12-SP5-GCE-SAP-BYOS-2019-1111,Image SLES12-SP5-GCE-SAP-On-Demand-2019-1111,Image SLES12-SP5-OCI-BYOS-SAP-BYOS-2019-1111,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2019-1111,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2019-1111,SUSE-2019-1111,SUSE-SLE-DESKTOP-12-SP3-2019-1111,SUSE-SLE-DESKTOP-12-SP4-2019-1111,SUSE-SLE-SDK-12-SP3-2019-1111,SUSE-SLE-SDK-12-SP4-2019-1111,SUSE-SLE-SERVER-12-SP3-2019-1111,SUSE-SLE-SERVER-12-SP4-2019-1111 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20191111-1/ Link for SUSE-SU-2019:1111-1 https://lists.suse.com/pipermail/sle-security-updates/2019-April/005415.html E-Mail link for SUSE-SU-2019:1111-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1096209 SUSE Bug 1096209 https://bugzilla.suse.com/1098155 SUSE Bug 1098155 https://bugzilla.suse.com/1128712 SUSE Bug 1128712 https://www.suse.com/security/cve/CVE-2018-1152/ SUSE CVE CVE-2018-1152 page https://www.suse.com/security/cve/CVE-2018-11813/ SUSE CVE CVE-2018-11813 page https://www.suse.com/security/cve/CVE-2018-14498/ SUSE CVE CVE-2018-14498 page Container caasp/v4/nginx-ingress-controller:beta1 Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 libjpeg8-8.1.2-31.14.2 libjpeg62-62.2.0-31.14.2 libjpeg-turbo-1.5.3-31.14.2 libjpeg62-32bit-62.2.0-31.14.2 libjpeg62-64bit-62.2.0-31.14.2 libjpeg62-devel-62.2.0-31.14.2 libjpeg62-devel-32bit-62.2.0-31.14.2 libjpeg62-devel-64bit-62.2.0-31.14.2 libjpeg62-turbo-1.5.3-31.14.2 libjpeg8-32bit-8.1.2-31.14.2 libjpeg8-64bit-8.1.2-31.14.2 libjpeg8-devel-8.1.2-31.14.2 libjpeg8-devel-32bit-8.1.2-31.14.2 libjpeg8-devel-64bit-8.1.2-31.14.2 libturbojpeg0-8.1.2-31.14.2 libturbojpeg0-32bit-8.1.2-31.14.2 libturbojpeg0-64bit-8.1.2-31.14.2 libjpeg8-8.1.2-31.14.2 as a component of Container caasp/v4/nginx-ingress-controller:beta1 libjpeg62-62.2.0-31.14.2 as a component of Image SLES12-SP5-Azure-SAP-BYOS libjpeg8-8.1.2-31.14.2 as a component of Image SLES12-SP5-Azure-SAP-BYOS libjpeg62-62.2.0-31.14.2 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libjpeg8-8.1.2-31.14.2 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libjpeg62-62.2.0-31.14.2 as a component of Image SLES12-SP5-EC2-SAP-BYOS libjpeg8-8.1.2-31.14.2 as a component of Image SLES12-SP5-EC2-SAP-BYOS libjpeg62-62.2.0-31.14.2 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libjpeg8-8.1.2-31.14.2 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libjpeg62-62.2.0-31.14.2 as a component of Image SLES12-SP5-GCE-SAP-BYOS libjpeg8-8.1.2-31.14.2 as a component of Image SLES12-SP5-GCE-SAP-BYOS libjpeg62-62.2.0-31.14.2 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libjpeg8-8.1.2-31.14.2 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libjpeg62-62.2.0-31.14.2 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS libjpeg8-8.1.2-31.14.2 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS libjpeg62-62.2.0-31.14.2 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libjpeg8-8.1.2-31.14.2 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libjpeg62-62.2.0-31.14.2 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libjpeg8-8.1.2-31.14.2 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libjpeg-turbo-1.5.3-31.14.2 as a component of SUSE Linux Enterprise Desktop 12 SP3 libjpeg62-62.2.0-31.14.2 as a component of SUSE Linux Enterprise Desktop 12 SP3 libjpeg62-32bit-62.2.0-31.14.2 as a component of SUSE Linux Enterprise Desktop 12 SP3 libjpeg62-turbo-1.5.3-31.14.2 as a component of SUSE Linux Enterprise Desktop 12 SP3 libjpeg8-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Desktop 12 SP3 libjpeg8-32bit-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Desktop 12 SP3 libturbojpeg0-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Desktop 12 SP3 libjpeg-turbo-1.5.3-31.14.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 libjpeg62-62.2.0-31.14.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 libjpeg62-32bit-62.2.0-31.14.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 libjpeg62-turbo-1.5.3-31.14.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 libjpeg8-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 libjpeg8-32bit-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 libturbojpeg0-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Desktop 12 SP4 libjpeg-turbo-1.5.3-31.14.2 as a component of SUSE Linux Enterprise Server 12 SP3 libjpeg62-62.2.0-31.14.2 as a component of SUSE Linux Enterprise Server 12 SP3 libjpeg62-32bit-62.2.0-31.14.2 as a component of SUSE Linux Enterprise Server 12 SP3 libjpeg62-turbo-1.5.3-31.14.2 as a component of SUSE Linux Enterprise Server 12 SP3 libjpeg8-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Server 12 SP3 libjpeg8-32bit-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Server 12 SP3 libturbojpeg0-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Server 12 SP3 libjpeg-turbo-1.5.3-31.14.2 as a component of SUSE Linux Enterprise Server 12 SP4 libjpeg62-62.2.0-31.14.2 as a component of SUSE Linux Enterprise Server 12 SP4 libjpeg62-32bit-62.2.0-31.14.2 as a component of SUSE Linux Enterprise Server 12 SP4 libjpeg62-turbo-1.5.3-31.14.2 as a component of SUSE Linux Enterprise Server 12 SP4 libjpeg8-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Server 12 SP4 libjpeg8-32bit-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Server 12 SP4 libturbojpeg0-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Server 12 SP4 libjpeg-turbo-1.5.3-31.14.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libjpeg62-62.2.0-31.14.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libjpeg62-32bit-62.2.0-31.14.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libjpeg62-turbo-1.5.3-31.14.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libjpeg8-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libjpeg8-32bit-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libturbojpeg0-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libjpeg-turbo-1.5.3-31.14.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libjpeg62-62.2.0-31.14.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libjpeg62-32bit-62.2.0-31.14.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libjpeg62-turbo-1.5.3-31.14.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libjpeg8-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libjpeg8-32bit-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libturbojpeg0-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libjpeg62-devel-62.2.0-31.14.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libjpeg8-devel-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libjpeg62-devel-62.2.0-31.14.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libjpeg8-devel-8.1.2-31.14.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image. CVE-2018-1152 Container caasp/v4/nginx-ingress-controller:beta1:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-Azure-SAP-BYOS:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-Azure-SAP-BYOS:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-Azure-SAP-On-Demand:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-Azure-SAP-On-Demand:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-EC2-SAP-BYOS:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-EC2-SAP-BYOS:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-EC2-SAP-On-Demand:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-EC2-SAP-On-Demand:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-GCE-SAP-BYOS:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-GCE-SAP-BYOS:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-GCE-SAP-On-Demand:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-GCE-SAP-On-Demand:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP3:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP4:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Software Development Kit 12 SP3:libjpeg62-devel-62.2.0-31.14.2 SUSE Linux Enterprise Software Development Kit 12 SP3:libjpeg8-devel-8.1.2-31.14.2 SUSE Linux Enterprise Software Development Kit 12 SP4:libjpeg62-devel-62.2.0-31.14.2 SUSE Linux Enterprise Software Development Kit 12 SP4:libjpeg8-devel-8.1.2-31.14.2 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191111-1/ https://www.suse.com/security/cve/CVE-2018-1152.html CVE-2018-1152 https://bugzilla.suse.com/1098155 SUSE Bug 1098155 libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF. CVE-2018-11813 Container caasp/v4/nginx-ingress-controller:beta1:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-Azure-SAP-BYOS:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-Azure-SAP-BYOS:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-Azure-SAP-On-Demand:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-Azure-SAP-On-Demand:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-EC2-SAP-BYOS:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-EC2-SAP-BYOS:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-EC2-SAP-On-Demand:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-EC2-SAP-On-Demand:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-GCE-SAP-BYOS:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-GCE-SAP-BYOS:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-GCE-SAP-On-Demand:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-GCE-SAP-On-Demand:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP3:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP4:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Software Development Kit 12 SP3:libjpeg62-devel-62.2.0-31.14.2 SUSE Linux Enterprise Software Development Kit 12 SP3:libjpeg8-devel-8.1.2-31.14.2 SUSE Linux Enterprise Software Development Kit 12 SP4:libjpeg62-devel-62.2.0-31.14.2 SUSE Linux Enterprise Software Development Kit 12 SP4:libjpeg8-devel-8.1.2-31.14.2 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191111-1/ https://www.suse.com/security/cve/CVE-2018-11813.html CVE-2018-11813 https://bugzilla.suse.com/1096209 SUSE Bug 1096209 https://bugzilla.suse.com/1172994 SUSE Bug 1172994 https://bugzilla.suse.com/1172995 SUSE Bug 1172995 get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries. CVE-2018-14498 Container caasp/v4/nginx-ingress-controller:beta1:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-Azure-SAP-BYOS:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-Azure-SAP-BYOS:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-Azure-SAP-On-Demand:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-Azure-SAP-On-Demand:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-EC2-SAP-BYOS:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-EC2-SAP-BYOS:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-EC2-SAP-On-Demand:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-EC2-SAP-On-Demand:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-GCE-SAP-BYOS:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-GCE-SAP-BYOS:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-GCE-SAP-On-Demand:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-GCE-SAP-On-Demand:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libjpeg8-8.1.2-31.14.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libjpeg62-62.2.0-31.14.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP3:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Desktop 12 SP4:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP3:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP3:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP4:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Server 12 SP4:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg62-32bit-62.2.0-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg62-62.2.0-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg62-turbo-1.5.3-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg8-32bit-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjpeg8-8.1.2-31.14.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libturbojpeg0-8.1.2-31.14.2 SUSE Linux Enterprise Software Development Kit 12 SP3:libjpeg62-devel-62.2.0-31.14.2 SUSE Linux Enterprise Software Development Kit 12 SP3:libjpeg8-devel-8.1.2-31.14.2 SUSE Linux Enterprise Software Development Kit 12 SP4:libjpeg62-devel-62.2.0-31.14.2 SUSE Linux Enterprise Software Development Kit 12 SP4:libjpeg8-devel-8.1.2-31.14.2 low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20191111-1/ https://www.suse.com/security/cve/CVE-2018-14498.html CVE-2018-14498 https://bugzilla.suse.com/1128712 SUSE Bug 1128712