Leo, On 27/11/16 21:55, Leo Famulari wrote: > Can you double-check that there are no unpatched named bugs in this > version? Already did ;-) According to [1], there are three known CVEs, all fixed by 1.4.2. I didn't find any third party security patches being applied anywhere, either. Do you have suspicions otherwise? Kind regards, T G-R [1]: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=libjpeg-turbo