Skip to content

Conversation

@mattleibow
Copy link
Contributor

Description of Change

There is a CVE report CVE-2023-25193 of libjpeg being used, however, it is not and the libjpeg-turbo is used instead. In addition, the libjpeg-turb codebase is from the time the issue was fixed - and it was not a security issue.

See more: libjpeg-turbo/libjpeg-turbo#500 (comment)

@mattleibow mattleibow merged commit b608de5 into main Aug 28, 2023
@mattleibow mattleibow deleted the dev/cve branch August 28, 2023 14:02
@mattleibow mattleibow added the backport/release/2.x Backport this PR to release/2.x label Aug 28, 2023
github-actions bot pushed a commit that referenced this pull request Aug 28, 2023
(cherry picked from commit b608de5)
mattleibow added a commit that referenced this pull request Aug 28, 2023
(cherry picked from commit b608de5)

Co-authored-by: Matthew Leibowitz <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport/release/2.x Backport this PR to release/2.x

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants