Format: 1.8
Date: Wed, 21 Sep 2022 13:54:13 -0400
Source: libjpeg-turbo
Binary: libjpeg-turbo-progs libjpeg-turbo-test libjpeg-turbo8 libjpeg-turbo8-dbg libjpeg-turbo8-dev libturbojpeg libturbojpeg0-dev
Architecture: arm64
Version: 2.0.3-0ubuntu1.20.04.3
Distribution: focal
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-038.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libjpeg-turbo-progs - Programs for manipulating JPEG files
 libjpeg-turbo-test - Program for benchmarking and testing libjpeg-turbo
 libjpeg-turbo8 - IJG JPEG compliant runtime library.
 libjpeg-turbo8-dbg - Debugging symbols for the libjpeg-turbo library
 libjpeg-turbo8-dev - Development files for the IJG JPEG library
 libturbojpeg - IJG JPEG compliant runtime library.
 libturbojpeg0-dev - Development files for the TurboJPEG library
Changes:
 libjpeg-turbo (2.0.3-0ubuntu1.20.04.3) focal-security; urgency=medium
 .
   * SECURITY UPDATE: stack-based buffer overflow in the "transform"
     component
     - debian/patches/CVE-2020-17541.patch: fix very rare local buffer
       overrun in jchuff.c.
     - CVE-2020-17541
   * SECURITY UPDATE: null pointer dereference
     - debian/patches/CVE-2020-35538.patch: fix jpeg_skip_scanlines()
       segfault w/merged upsamp in jdapistd.c, jdmerge.c, jdmerge.h,
       jdmrg565.c, jdmrgext.c.
     - debian/patches/CVE-2020-35538-2.patch: further jpeg_skip_scanlines()
       fixes in CMakeLists.txt, croptest.in, jdapistd.c.
     - CVE-2020-35538
   * SECURITY UPDATE: heap-based buffer overflow
     - debian/patches/CVE-2021-46822.patch: fix issues w/loading 16-bit
       PPMs/PGMs in rdppm.c.
     - CVE-2021-46822
Checksums-Sha1:
 8f63718e262c69282bb684f203450aa5142f4140 174072 libjpeg-turbo-progs-dbgsym_2.0.3-0ubuntu1.20.04.3_arm64.ddeb
 74868f88a13490840cf993c8ff737b31a1fddfd9 64536 libjpeg-turbo-progs_2.0.3-0ubuntu1.20.04.3_arm64.deb
 5f12fa22cba7d1d1a17fd6085ea58f455be0884e 76012 libjpeg-turbo-test-dbgsym_2.0.3-0ubuntu1.20.04.3_arm64.ddeb
 0515416f64aa45b380e05438e9cd0a05b82671d0 31152 libjpeg-turbo-test_2.0.3-0ubuntu1.20.04.3_arm64.deb
 4ba97de2c79afab3f522629fe07ef4bd790225e4 394232 libjpeg-turbo8-dbg_2.0.3-0ubuntu1.20.04.3_arm64.deb
 f9d169e1d04afb670f6385800b4a5f630e5ccd64 214896 libjpeg-turbo8-dev_2.0.3-0ubuntu1.20.04.3_arm64.deb
 827db1990cfe1e2070e92436a24c3550534ffcbd 100920 libjpeg-turbo8_2.0.3-0ubuntu1.20.04.3_arm64.deb
 6f9c21fe7e7a490afdaf82928271ea1c6a2a2a11 12356 libjpeg-turbo_2.0.3-0ubuntu1.20.04.3_arm64.buildinfo
 80c1580e084d9198bc1b791d3f67bd9ae22079df 556368 libturbojpeg-dbgsym_2.0.3-0ubuntu1.20.04.3_arm64.ddeb
 06ca4fb1910f6ac3a159c13a1fbcb14c77024c8a 152484 libturbojpeg0-dev_2.0.3-0ubuntu1.20.04.3_arm64.deb
 1add74f4349e1dd86965b1ea278a8e7f90935d77 135568 libturbojpeg_2.0.3-0ubuntu1.20.04.3_arm64.deb
Checksums-Sha256:
 af84b344069978c89d8ba615f3402524c1b8f0535388a41a3cdefd54e1b9f887 174072 libjpeg-turbo-progs-dbgsym_2.0.3-0ubuntu1.20.04.3_arm64.ddeb
 ebbed91f773ee26beaa7ce663293ecacd6aeddb56617e4b344e6a16523d0641a 64536 libjpeg-turbo-progs_2.0.3-0ubuntu1.20.04.3_arm64.deb
 98052226e78e93d04cfc276471dd1138da7290a20bf7ebbd7428d1d82b0624e9 76012 libjpeg-turbo-test-dbgsym_2.0.3-0ubuntu1.20.04.3_arm64.ddeb
 883bc7ea0967101254f8a91ac9d88edf8cbee2e497a041f5a22f186bf7c1eca8 31152 libjpeg-turbo-test_2.0.3-0ubuntu1.20.04.3_arm64.deb
 68bf0faa207c9b8758a77e1b50f7ed7c6e38e5e8a86067c0f9d137e9fa39a0c6 394232 libjpeg-turbo8-dbg_2.0.3-0ubuntu1.20.04.3_arm64.deb
 041dd17cdc825b0511fbaa2f38fc1cdaef1c049addb24659c58bb93c86902016 214896 libjpeg-turbo8-dev_2.0.3-0ubuntu1.20.04.3_arm64.deb
 9cd60a19f70399f4a828c7849bc7f18e53c059112100264e568486774eefcc17 100920 libjpeg-turbo8_2.0.3-0ubuntu1.20.04.3_arm64.deb
 e272b31bbc2259618938659e0a9a9b800e201a0e77bddca9f08cacbc6ab94475 12356 libjpeg-turbo_2.0.3-0ubuntu1.20.04.3_arm64.buildinfo
 8a700bbbe6f2816f2e1912bc1eddf61b17fa1255d68b56290134740612e75e5c 556368 libturbojpeg-dbgsym_2.0.3-0ubuntu1.20.04.3_arm64.ddeb
 3a3d7fcca37a0177a5da1d23dd44e55b2bb63b2acea963de366cc7bfda033402 152484 libturbojpeg0-dev_2.0.3-0ubuntu1.20.04.3_arm64.deb
 fea5815d6b4f5742b04ec88fe51e6357d339b0d709ac4c5d1f91166666260fb8 135568 libturbojpeg_2.0.3-0ubuntu1.20.04.3_arm64.deb
Files:
 a7579c9e6f139f380ad79c5f97536510 174072 debug optional libjpeg-turbo-progs-dbgsym_2.0.3-0ubuntu1.20.04.3_arm64.ddeb
 6375ade2e982410c41db73a9363dae79 64536 graphics optional libjpeg-turbo-progs_2.0.3-0ubuntu1.20.04.3_arm64.deb
 04ccc4304bf767303a92a2bd894b7af1 76012 debug optional libjpeg-turbo-test-dbgsym_2.0.3-0ubuntu1.20.04.3_arm64.ddeb
 f67b4d16c91f9020b13298d487b3ee2a 31152 debug optional libjpeg-turbo-test_2.0.3-0ubuntu1.20.04.3_arm64.deb
 3321fa589ded8ec5170c9bc4a1699c51 394232 debug optional libjpeg-turbo8-dbg_2.0.3-0ubuntu1.20.04.3_arm64.deb
 bb5dde2a9fad4f6883bea030c8d7565e 214896 libdevel optional libjpeg-turbo8-dev_2.0.3-0ubuntu1.20.04.3_arm64.deb
 e000f6879186b2b43a4a51791b1ab3da 100920 libs optional libjpeg-turbo8_2.0.3-0ubuntu1.20.04.3_arm64.deb
 6df7989e9bdf2d25bb3d492f7cab1241 12356 graphics optional libjpeg-turbo_2.0.3-0ubuntu1.20.04.3_arm64.buildinfo
 9832ded6004ebc09d918939103d6abca 556368 debug optional libturbojpeg-dbgsym_2.0.3-0ubuntu1.20.04.3_arm64.ddeb
 871f7437274699bb4eafce2d7cd4949f 152484 libdevel optional libturbojpeg0-dev_2.0.3-0ubuntu1.20.04.3_arm64.deb
 7babea30fa38af0e6ee23ce2fea93a82 135568 libs optional libturbojpeg_2.0.3-0ubuntu1.20.04.3_arm64.deb