Bug 1202915 - (CVE-2020-35538) VUL-0: CVE-2020-35538: libjpeg62-turbo,libjpeg-turbo: Null pointer dereference in jcopy_sample_rows() function
(CVE-2020-35538)
VUL-0: CVE-2020-35538: libjpeg62-turbo,libjpeg-turbo: Null pointer dereferenc...
Status: NEW
Classification: Novell Products
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents
unspecified
Other Other
: P3 - Medium : Normal
: ---
Assigned To: Security Team bot
Security Team bot
https://smash.suse.de/issue/341088/
CVSSv3.1:SUSE:CVE-2020-35538:4.7:(AV:...
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2022-08-30 11:12 UTC by Hu
Modified: 2022-10-04 19:19 UTC (History)
2 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Hu 2022-08-30 11:12:18 UTC
rh#2122387

A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed by libjpeg-turbo.

Upstream issue:

https://github.com/libjpeg-turbo/libjpeg-turbo/issues/441

Upstream fix:

https://github.com/libjpeg-turbo/libjpeg-turbo/commit/9120a247436e84c0b4eea828cb11e8f665fcde30

References:
https://bugzilla.redhat.com/show_bug.cgi?id=2122387
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-35538
Comment 1 Hu 2022-08-30 11:12:34 UTC
Affected:
- SUSE:SLE-12:Update/libjpeg-turbo        1.5.3
- SUSE:SLE-12:Update/libjpeg62-turbo      1.5.3
- SUSE:SLE-15:Update/libjpeg-turbo        1.5.3
- SUSE:SLE-15:Update/libjpeg62-turbo      1.5.3

Not Affected (already fixed):
- SUSE:SLE-15-SP4:Update/libjpeg-turbo    2.1.1
- SUSE:SLE-15-SP4:Update/libjpeg62-turbo  2.1.1
- openSUSE:Factory/libjpeg-turbo          2.1.4
- openSUSE:Factory/libjpeg62-turbo        2.1.4

Not affected (does not contain relevant code):
- SUSE:SLE-11:Update/jpeg
Comment 2 Petr Gajdos 2022-09-08 12:03:36 UTC
Submitted for 15,12/libjpeg-turbo.

I believe all fixed.
Comment 5 Thomas Leroy 2022-09-21 15:28:22 UTC
(In reply to Petr Gajdos from comment #2)
> Submitted for 15,12/libjpeg-turbo.
> 
> I believe all fixed.

Thanks for your submissions Petr. Could you also please submit to:
- SUSE:SLE-12:Update/libjpeg62-turbo      1.5.3
- SUSE:SLE-15:Update/libjpeg62-turbo      1.5.3
Comment 6 Swamp Workflow Management 2022-09-30 13:19:54 UTC
SUSE-SU-2022:3475-1: An update that fixes one vulnerability is now available.

Category: security (moderate)
Bug References: 1202915
CVE References: CVE-2020-35538
JIRA References: 
Sources used:
SUSE Linux Enterprise Software Development Kit 12-SP5 (src):    libjpeg-turbo-1.5.3-31.28.1, libjpeg62-turbo-1.5.3-31.28.1
SUSE Linux Enterprise Server 12-SP5 (src):    libjpeg-turbo-1.5.3-31.28.1, libjpeg62-turbo-1.5.3-31.28.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 7 Swamp Workflow Management 2022-10-04 19:19:22 UTC
SUSE-SU-2022:3523-1: An update that fixes one vulnerability is now available.

Category: security (moderate)
Bug References: 1202915
CVE References: CVE-2020-35538
JIRA References: 
Sources used:
openSUSE Leap Micro 5.2 (src):    libjpeg-turbo-1.5.3-150000.32.5.1
openSUSE Leap 15.4 (src):    libjpeg62-turbo-1.5.3-150000.32.5.1
openSUSE Leap 15.3 (src):    libjpeg-turbo-1.5.3-150000.32.5.1, libjpeg62-turbo-1.5.3-150000.32.5.1
SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (src):    libjpeg-turbo-1.5.3-150000.32.5.1
SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (src):    libjpeg-turbo-1.5.3-150000.32.5.1
SUSE Linux Enterprise Module for Basesystem 15-SP3 (src):    libjpeg-turbo-1.5.3-150000.32.5.1, libjpeg62-turbo-1.5.3-150000.32.5.1
SUSE Linux Enterprise Micro 5.2 (src):    libjpeg-turbo-1.5.3-150000.32.5.1
SUSE Linux Enterprise Micro 5.1 (src):    libjpeg-turbo-1.5.3-150000.32.5.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.