All Vulnerability Reports

USN-3706-1: libjpeg-turbo vulnerabilities


Severity

Low

References
Description

CVEs contained in this USN include: CVE-2014-9092, CVE-2016-3616, CVE-2017-15232, CVE-2018-11212, CVE-2018-11213, CVE-2018-11214, CVE-2018-1152

Total CVEs: 7

Affected Pivotal Products and Versions

Severity is low unless otherwise noted.

  • Vulnerable Cloud Foundry components individually listed here.
  • Pivotal products using CF components prior to the listed updated versions are vulnerable to this issue. See the Mitigation section below for more information.
Mitigation

Users of affected versions should apply the following mitigation:

  • The Cloud Foundry team recommends upgrading BOSH stemcells and/or other OSS components listed here if applicable.
  • Upgrade Pivotal products that use earlier versions of CF components to new Pivotal releases using new versions linked above. On the Pivotal Network product page for each release, check the Depends On section and/or Release Notes for this information.
  • Releases that have fixed this issue include:
    • PCF Isolation Segment: 2.2.2, 2.1.8, 2.0.14
    • Pivotal Application Service: 2.2.2, 2.1.9, 2.0.18
    • See Pivotal Network for information on all other tiles.