Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
Debian Bug report logs -
#985082
libjpeg-turbo: CVE-2021-0384
Package:
src:libjpeg-turbo;
Maintainer for src:libjpeg-turbo is Ondřej Surý <ondrej@debianorg>;
Reported by: Salvatore Bonaccorso <carnil@debianorg>
Date: Fri, 12 Mar 2021 18:30:01 UTC
Severity: important
Tags: security, upstream
Found in version libj ...
A security issue was found in libjpeg-turbo before version 21 Undefined behaviour, namely applying a zero offset to a null pointer in the jpeg_skip_scanlines() function, could lead to an application crash ...