Kusagadzikana mu library ye libjpeg-turbo

Π’ libjpeg-turbo, raibhurari ye encoding uye decoding mifananidzo yeJPEG, kuzivikanwa kusagadzikana (CVE-2019-2201), zvichitungamira kuhuwandu hwekufashukira uye huwori hunotevera hwemirwi yemukati paunenge uchigadzira mafaera eJPEG neimwe nzira. Zvichigona, kusazvibata hakubvisi mukana wekugadzira mukana wekuronga kodhi kuuraya pane system (kurwiswa kunoda kugadzirisa mufananidzo wakakura kwazvo nechisarudzo che26755 x 26755).

Dambudziko pasina kushambadza zvisina basa fixed mukuburitswa 2.0.3, asi sezviri pachena yakabviswa kwete zvachose uye mamwe mavector ekurwisa asara. Mukugovera dambudziko rinoramba risina kugadziriswa (Debian, SUSE/openSUSE, RHEL, Fedora, Ubuntu).

Source: opennet.ru

Voeg