CVE-2018-19664

libjpeg-turbo 2.0.1 has a heap-based buffer over-read in the put_pixel_rows function in wrbmp.c, as demonstrated by djpeg.

packagechannelchannel versionpkg versionstatus
libjpeg
nixos-18.09
2019-05-19 13:10:54 UTC (a7e559)2.0.1patched
2019-05-18 12:10:27 UTC (87f146)2.0.1patched
2019-05-11 21:00:36 UTC (1e9e70)2.0.1patched
2019-05-10 17:45:25 UTC (6cd060)2.0.1patched
2019-05-09 00:00:40 UTC (7413c8)2.0.1patched
2019-05-06 03:50:44 UTC (c2a650)2.0.1patched
2019-05-05 19:25:21 UTC (8b166e)2.0.1patched
2019-05-05 03:15:34 UTC (9e149f)2.0.1patched
2019-05-04 01:55:24 UTC (a48371)2.0.1patched
2019-05-03 20:15:20 UTC (f21323)2.0.1patched
2019-05-02 07:55:47 UTC (412455)2.0.1patched
2019-04-30 22:55:30 UTC (ca6a1a)2.0.1patched
2019-04-23 17:45:19 UTC (571b40)2.0.1patched
2019-04-16 22:25:30 UTC (2aa505)2.0.1patched
2019-04-16 15:10:47 UTC (05ef70)2.0.1patched
2019-04-11 02:15:34 UTC (46d386)2.0.1patched
2019-04-10 05:10:35 UTC (22a606)2.0.1patched
2019-04-05 19:50:33 UTC (222950)2.0.1patched
2019-04-04 21:25:36 UTC (58efb6)2.0.1patched
2019-04-03 14:50:24 UTC (1d36ad)2.0.1patched
2019-04-03 04:40:28 UTC (884b0a)2.0.1patched
2019-04-02 20:50:38 UTC (58fbeb)2.0.1patched
2019-04-01 18:20:18 UTC (43ba99)2.0.1patched
2019-04-01 07:30:24 UTC (3eed6d)2.0.1patched
2019-03-29 18:35:42 UTC (395a54)2.0.1patched
2019-03-29 07:05:41 UTC (224838)2.0.1patched
2019-03-29 03:20:29 UTC (2ec3dc)2.0.1patched
2019-03-26 07:05:14 UTC (2d656a)2.0.1patched
2019-03-25 17:20:29 UTC (918bc4)2.0.1patched
2019-03-25 04:25:37 UTC (40e716)2.0.1patched
2019-03-22 20:35:45 UTC (680f9d)2.0.1patched
2019-03-22 13:35:30 UTC (f4b2ae)2.0.1patched
2019-03-21 18:10:43 UTC (15f089)2.0.1patched
2019-03-20 18:10:28 UTC (45456f)2.0.1patched
2019-03-20 15:40:27 UTC (3aa640)2.0.1patched
2019-03-19 17:00:41 UTC (8751ed)2.0.1patched
2019-03-16 14:40:19 UTC (5d972d)2.0.1patched
2019-03-09 07:20:20 UTC (37694c)2.0.1patched
2019-03-08 23:45:29 UTC (28e303)2.0.1patched
2019-03-08 06:25:46 UTC (fef0aa)2.0.1patched
2019-03-07 18:05:22 UTC (8abca4)2.0.1patched
2019-03-07 17:45:42 UTC (7e34b1)2.0.1patched
2019-03-07 02:35:35 UTC (4c089d)2.0.1patched
2019-03-06 18:40:42 UTC (18fec2)2.0.1patched
2019-03-06 12:05:50 UTC (343abf)2.0.1patched
2019-03-05 16:50:30 UTC (95fed2)2.0.1patched
2019-03-04 10:15:40 UTC (e542fc)2.0.1patched
2019-03-04 08:05:30 UTC (770d3c)2.0.1patched
2019-03-03 03:30:39 UTC (4c0be4)2.0.1patched
2019-03-02 20:00:26 UTC (80754f)2.0.1patched
2019-03-02 19:40:36 UTC (bf9cd8)2.0.1patched
2019-03-01 11:05:08 UTC (060bcd)2.0.1patched
2019-02-28 17:50:32 UTC (dc4823)2.0.1patched
2019-02-28 17:30:41 UTC (1374ba)2.0.1patched
2019-02-28 08:45:37 UTC (8c2447)2.0.1patched
2019-02-25 12:50:27 UTC (aabc61)2.0.1patched
2019-02-25 07:35:30 UTC (8e70d4)2.0.1patched
2019-02-24 14:00:14 UTC (235487)2.0.1patched
2019-02-23 17:25:23 UTC (753f58)2.0.1patched
2019-02-23 05:50:19 UTC (8ee1cd)2.0.1patched
2019-02-22 19:15:16 UTC (23453d)2.0.1patched
2019-02-22 00:25:24 UTC (3276e0)2.0.1patched
2019-02-21 20:25:16 UTC (1b621b)2.0.1patched
2019-02-21 00:40:09 UTC (63a098)2.0.1patched
2019-02-20 10:45:24 UTC (19a054)2.0.1patched
2019-02-16 03:50:34 UTC (9bd45d)2.0.1patched
2019-02-15 21:30:42 UTC (0ba800)2.0.1patched
2019-02-12 06:10:39 UTC (168cbb)2.0.1patched
2019-02-11 13:55:33 UTC (109a28)2.0.1patched
2019-02-10 02:10:24 UTC (5225d4)2.0.1patched
2019-02-10 01:50:39 UTC (3acebb)2.0.1patched
2019-02-09 00:40:19 UTC (13050b)2.0.1patched
2019-02-08 20:40:18 UTC (e50e32)2.0.1patched
2019-02-08 15:20:24 UTC (b01a89)2.0.1patched
2019-02-08 00:40:33 UTC (e6ad2c)2.0.1patched
2019-02-06 14:15:36 UTC (8008d0)2.0.1patched
2019-02-06 07:10:13 UTC (12b146)2.0.1patched
2019-02-06 00:10:30 UTC (addb7f)2.0.1patched
2019-02-05 13:20:37 UTC (38a992)2.0.1patched
2019-02-05 00:25:18 UTC (d4a1e8)2.0.1patched
2019-02-04 10:40:17 UTC (dbb9f8)2.0.1patched
2019-02-03 00:40:33 UTC (2ff7ef)2.0.1patched
2019-02-02 09:35:36 UTC (7e1541)2.0.1patched
2019-02-01 17:50:30 UTC (248129)2.0.1patched
2019-02-01 12:00:39 UTC (10dbdd)2.0.1patched
2019-01-31 16:40:46 UTC (54e78e)2.0.1patched
2019-01-31 11:25:29 UTC (7f3df8)2.0.1patched
2019-01-31 04:20:34 UTC (f944ff)2.0.1patched
2019-01-23 20:55:29 UTC (749a3a)2.0.1patched
2019-01-21 06:35:31 UTC (50f41e)2.0.1patched
2019-01-20 17:40:37 UTC (5d9024)2.0.1patched
2019-01-15 12:35:18 UTC (97e0d5)2.0.1patched
2019-01-13 20:00:35 UTC (001b34)2.0.1patched
2019-01-07 15:50:52 UTC (c29503)2.0.1patched
2019-01-03 19:25:43 UTC (9d608a)2.0.1patched
2018-12-31 13:00:37 UTC (039634)2.0.1vulnerable
2018-12-30 14:00:25 UTC (0a8f35)2.0.1vulnerable
2018-12-28 07:35:42 UTC (76aafb)2.0.1vulnerable
2018-12-27 12:40:37 UTC (33000f)2.0.1vulnerable
nixos-19.03
2019-05-20 19:26:33 UTC (cdec62)2.0.1patched
2019-05-19 05:45:38 UTC (705986)2.0.1patched
2019-05-18 19:20:38 UTC (cff736)2.0.1patched
2019-05-18 14:40:37 UTC (51cc0e)2.0.1patched
2019-05-18 12:10:29 UTC (c86f09)2.0.1patched
2019-05-16 07:25:27 UTC (c21f08)2.0.1patched
2019-05-15 23:05:36 UTC (f5493b)2.0.1patched
2019-05-14 10:50:48 UTC (7cd2e4)2.0.1patched
2019-05-14 04:40:47 UTC (af657b)2.0.1patched
2019-05-12 22:55:17 UTC (727e5b)2.0.1patched
2019-05-12 18:15:28 UTC (c2570e)2.0.1patched
2019-05-12 06:15:30 UTC (312a05)2.0.1patched
2019-05-10 05:55:42 UTC (7bb74e)2.0.1patched
2019-05-09 23:45:28 UTC (2ec36d)2.0.1patched
2019-05-09 11:30:25 UTC (096e2f)2.0.1patched
2019-05-08 07:05:44 UTC (aade6d)2.0.1patched
2019-05-08 03:25:43 UTC (a04ef7)2.0.1patched
2019-05-07 18:25:28 UTC (3e7300)2.0.1patched
2019-05-07 12:25:52 UTC (2dcbd4)2.0.1patched
2019-05-07 03:45:44 UTC (2df17e)2.0.1patched
2019-05-06 22:45:43 UTC (8c6c85)2.0.1patched
2019-05-06 19:05:39 UTC (6ec097)2.0.1patched
2019-05-05 20:50:42 UTC (a177da)2.0.1patched
2019-05-05 11:55:39 UTC (6e29f2)2.0.1patched
2019-05-05 08:25:33 UTC (04954e)2.0.1patched
2019-05-02 22:00:31 UTC (915ce0)2.0.1patched
2019-05-02 14:05:46 UTC (2e6afa)2.0.1patched
2019-05-02 10:40:42 UTC (b2b5c1)2.0.1patched
2019-05-01 17:25:26 UTC (d740b2)2.0.1patched
2019-04-30 23:15:17 UTC (6d7ed9)2.0.1patched
2019-04-25 16:05:41 UTC (cf3e27)2.0.1patched
2019-04-24 14:30:20 UTC (2f1eac)2.0.1patched
2019-04-24 10:40:27 UTC (893541)2.0.1patched
2019-04-23 19:20:27 UTC (793640)2.0.1patched
2019-04-22 06:20:19 UTC (330b9f)2.0.1patched
2019-04-21 17:40:24 UTC (454eea)2.0.1patched
2019-04-21 16:40:14 UTC (83e778)2.0.1patched
2019-04-21 10:05:20 UTC (73c885)2.0.1patched
2019-04-20 19:45:16 UTC (b807bc)2.0.1patched
2019-04-19 19:40:31 UTC (8ea36d)2.0.1patched
2019-04-17 11:30:25 UTC (7b3696)2.0.1patched
2019-04-16 15:30:40 UTC (ea4979)2.0.1patched
2019-04-10 15:10:50 UTC (5c52b2)2.0.1patched
2019-04-10 14:15:29 UTC (63f250)2.0.1patched
2019-04-10 10:35:28 UTC (f52505)2.0.1patched
2019-04-10 08:25:33 UTC (0363ab)2.0.1patched
2019-04-08 01:00:36 UTC (67bc63)2.0.1patched
2019-04-05 01:55:19 UTC (91fa69)2.0.1patched
2019-04-04 23:20:18 UTC (e18a58)2.0.1patched
2019-04-04 17:35:16 UTC (ef2899)2.0.1patched
2019-03-31 05:55:25 UTC (3a4ffd)2.0.1patched
2019-03-25 19:05:29 UTC (23fd13)2.0.1patched
2019-03-24 15:55:20 UTC (ff9c3f)2.0.1patched
2019-03-24 09:05:37 UTC (fe9abc)2.0.1patched
2019-03-23 20:25:30 UTC (638216)2.0.1patched
2019-03-22 23:55:24 UTC (f5e7da)2.0.1patched
2019-03-21 04:35:34 UTC (91cb80)2.0.1patched
2019-03-20 11:55:29 UTC (3574db)2.0.1patched
2019-03-19 17:15:39 UTC (f00bd2)2.0.1patched
2019-03-19 13:55:38 UTC (2a7c34)2.0.1patched
2019-03-19 04:40:34 UTC (e0e29a)2.0.1patched
2019-03-18 08:30:37 UTC (b2b2ff)2.0.1patched
2019-03-18 07:25:46 UTC (6a3a05)2.0.1patched
2019-03-17 11:45:18 UTC (9aab14)2.0.1patched
2019-03-16 16:45:40 UTC (aa34ca)2.0.1patched
2019-03-11 16:05:16 UTC (5f3be9)2.0.1patched
2019-03-11 11:05:32 UTC (aea913)2.0.1patched
2019-03-11 04:15:21 UTC (508764)2.0.1patched
2019-03-10 20:35:28 UTC (72ad05)2.0.1patched
2019-03-10 14:30:29 UTC (360522)2.0.1patched
2019-03-10 03:10:39 UTC (52565a)2.0.1patched
2019-03-10 02:25:21 UTC (4610d6)2.0.1patched
2019-03-08 17:55:42 UTC (584748)2.0.1patched
2019-03-07 03:15:40 UTC (58e31b)2.0.1patched
2019-02-26 20:35:21 UTC (07e2b5)2.0.1patched
nixos-unstable
2019-05-03 17:40:38 UTC (190727)2.0.1patched
2019-04-30 23:35:46 UTC (aeb464)2.0.1patched
2019-04-25 16:30:32 UTC (dfd8f8)2.0.1patched
2019-04-24 12:55:41 UTC (0620e0)2.0.1patched
2019-04-21 22:55:37 UTC (d26027)2.0.1patched
2019-04-16 15:55:38 UTC (1fc591)2.0.1patched
2019-04-07 21:55:33 UTC (acbdaa)2.0.1patched
2019-04-05 11:20:44 UTC (d956f2)2.0.1patched
2019-03-27 00:30:32 UTC (07b42c)2.0.1patched
2019-03-21 05:55:30 UTC (373488)2.0.1patched
2019-03-19 00:35:43 UTC (1222e2)2.0.1patched
2019-03-18 22:50:18 UTC (4c6be1)2.0.1patched
2019-03-16 16:20:42 UTC (da1a2b)2.0.1patched
2019-03-10 06:15:14 UTC (5d3fd3)2.0.1patched
2019-03-05 07:50:31 UTC (34aa25)2.0.1patched
2019-03-02 21:10:38 UTC (26d8a8)2.0.1patched
2019-03-02 17:40:36 UTC (81bf89)2.0.1patched
2019-02-26 19:40:35 UTC (1233c8)2.0.1patched
2019-02-26 18:30:36 UTC (bd0189)2.0.1patched
2019-02-23 21:15:46 UTC (19eeda)2.0.1patched
2019-02-23 13:25:25 UTC (969cff)2.0.1patched
2019-02-22 17:55:42 UTC (2a81ec)2.0.1patched
2019-02-20 15:35:16 UTC (fa82eb)2.0.1patched
2019-02-20 10:40:25 UTC (b75eab)2.0.1patched
2019-02-12 10:30:40 UTC (36f316)2.0.1patched
2019-02-10 08:40:36 UTC (929cc7)2.0.1patched
2019-02-10 03:35:25 UTC (64825d)2.0.1patched
2019-02-10 03:10:30 UTC (baf6ba)2.0.1patched
2019-02-08 21:25:31 UTC (ffc604)2.0.1patched
2019-02-08 08:15:19 UTC (ce8c24)2.0.1patched
2019-02-07 20:30:24 UTC (6a0d2f)2.0.1patched
2019-02-05 03:30:20 UTC (2d6f84)2.0.1patched
2019-02-05 00:05:24 UTC (3bd7a3)2.0.1patched
2019-01-31 04:50:32 UTC (f2a1a4)2.0.1patched
2019-01-21 11:25:27 UTC (bc4131)2.0.1patched
2019-01-21 01:40:33 UTC (56507d)2.0.1patched
2019-01-16 11:30:44 UTC (be445a)2.0.1patched
2019-01-16 02:15:37 UTC (22b744)2.0.1patched
2019-01-13 15:40:25 UTC (626233)2.0.1patched
2019-01-04 22:55:33 UTC (eebd1a)2.0.1vulnerable
2018-12-30 14:15:36 UTC (201d73)2.0.1vulnerable
2018-12-27 16:45:30 UTC (ae002f)2.0.1vulnerable
2018-12-14 18:35:35 UTC (44b02b)2.0.1vulnerable
2018-12-14 07:45:26 UTC (e0a4d1)2.0.1vulnerable
2018-12-13 17:40:40 UTC (562b7a)2.0.1vulnerable
2018-12-13 10:00:19 UTC (47f008)2.0.1vulnerable
2018-12-13 06:35:46 UTC (c556e6)2.0.1vulnerable
2018-12-12 05:20:26 UTC (ad3e91)2.0.1vulnerable
2018-12-11 15:30:23 UTC (644950)2.0.1vulnerable
2018-12-11 11:30:31 UTC (86344b)2.0.1vulnerable