Name | Modified | Size | Downloads / Week |
---|---|---|---|
Parent folder | |||
README.md | 2023-08-23 | 2.4 kB | |
libjpeg-turbo-official_2.0.4_i386.deb | 2019-12-31 | 1.1 MB | |
libjpeg-turbo-official_2.0.4_amd64.deb | 2019-12-31 | 1.1 MB | |
libjpeg-turbo-official32_2.0.4_amd64.deb | 2019-12-31 | 851.4 kB | |
libjpeg-turbo-official-2.0.4.x86_64.rpm | 2019-12-31 | 1.1 MB | |
libjpeg-turbo-official-2.0.4.src.rpm | 2019-12-31 | 2.2 MB | |
libjpeg-turbo-official-2.0.4.i386.rpm | 2019-12-31 | 1.1 MB | |
libjpeg-turbo-2.0.4.tar.gz | 2019-12-31 | 2.2 MB | |
libjpeg-turbo-2.0.4.tar.gz.sig | 2019-12-31 | 65 Bytes | |
libjpeg-turbo-2.0.4.dmg | 2019-12-31 | 11.8 MB | |
libjpeg-turbo-2.0.4-vc64.exe | 2019-12-31 | 1.3 MB | |
libjpeg-turbo-2.0.4-vc.exe | 2019-12-31 | 1.1 MB | |
libjpeg-turbo-2.0.4-jws.zip | 2019-12-31 | 1.4 MB | |
libjpeg-turbo-2.0.4-gcc64.exe | 2019-12-31 | 1.4 MB | |
libjpeg-turbo-2.0.4-gcc.exe | 2019-12-31 | 1.2 MB | |
Totals: 15 Items | 27.8 MB | 3,360 |
Package signatures
To ensure the integrity of the libjpeg-turbo binary packages, the RPM and DEB
files and the source tarball are signed using the following key:
https://www.libjpeg-turbo.org/key/LJT-GPG-KEY-1024
https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x7d6293cc6378786e1b5c496885c7044e033fde16
and the Windows installers are signed using a code signing certificate.
2.0.4
Significant changes relative to 2.0.3:
-
Fixed a regression in the Windows packaging system (introduced by 2.0 beta1[2]) whereby, if both the 64-bit libjpeg-turbo SDK for GCC and the 64-bit libjpeg-turbo SDK for Visual C++ were installed on the same system, only one of them could be uninstalled.
-
Fixed a signed integer overflow and subsequent segfault that occurred when attempting to decompress images with more than 715827882 pixels using the 64-bit C version of TJBench.
-
Fixed out-of-bounds write in
tjDecompressToYUV2()
andtjDecompressToYUVPlanes()
(sometimes manifesting as a double free) that occurred when attempting to decompress grayscale JPEG images that were compressed with a sampling factor other than 1 (for instance, withcjpeg -grayscale -sample 2x2
). -
Fixed a regression introduced by 2.0.2[5] that caused the TurboJPEG API to incorrectly identify some JPEG images with unusual sampling factors as 4:4:4 JPEG images. This was known to cause a buffer overflow when attempting to decompress some such images using
tjDecompressToYUV2()
ortjDecompressToYUVPlanes()
. -
Fixed an issue (CVE-2020-17541), detected by ASan, whereby attempting to losslessly transform a specially-crafted malformed JPEG image containing an extremely-high-frequency coefficient block (junk image data that could never be generated by a legitimate JPEG compressor) could cause the Huffman encoder's local buffer to be overrun. (Refer to 1.4.0[9] and 1.4beta1[15].) Given that the buffer overrun was fully contained within the stack and did not cause a segfault or other user-visible errant behavior, and given that the lossless transformer (unlike the decompressor) is not generally exposed to arbitrary data exploits, this issue did not likely pose a security risk.
-
The Arm 64-bit (Armv8) Neon SIMD assembly code now stores constants in a separate read-only data section rather than in the text section, to support execute-only memory layouts.