Linux · Security advisory · May 2, 2024

ELSA-2024-2295: Security update for 5 packages

ELSA-2024-2295, released May 2, 2024, fixes 1 CVE across 5 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0082
57th percentile

Fixed package versions

ProductReleaseFixed in
libjpeg-turbool 90:2.0.90-7.el9
libjpeg-turbo-develol 90:2.0.90-7.el9
libjpeg-turbo-utilsol 90:2.0.90-7.el9
turbojpegol 90:2.0.90-7.el9
turbojpeg-develol 90:2.0.90-7.el9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-29390 libjpeg-turbo-devel: The libjpeg-turbo packages contain a library of functions for manipulating JPEG images 7.1 0.0082 None reported
Showing 1 to 1 of 1 1