Red Hat Security AdvisoryRHSA-2020:0262
openjpeg2 security update
Released 2020-01-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openjpeg2-2.3.1-2.el7_7
- Red Hat Enterprise Linux Client Optional (v. 7) openjpeg2-devel-2.3.1-2.el7_7, openjpeg2-devel-docs-2.3.1-2.el7_7, openjpeg2-tools-2.3.1-2.el7_7
- Red Hat Enterprise Linux ComputeNode (v. 7) openjpeg2-2.3.1-2.el7_7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openjpeg2-devel-2.3.1-2.el7_7, openjpeg2-devel-docs-2.3.1-2.el7_7, openjpeg2-tools-2.3.1-2.el7_7
- Red Hat Enterprise Linux Server (v. 7) openjpeg2-2.3.1-2.el7_7, openjpeg2-2.3.1-2.el7_7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) openjpeg2-devel-2.3.1-2.el7_7, openjpeg2-devel-2.3.1-2.el7_7.ppc, openjpeg2-devel-docs-2.3.1-2.el7_7 +2
- Red Hat Enterprise Linux Workstation (v. 7) openjpeg2-2.3.1-2.el7_7
- Red Hat Enterprise Linux Workstation Optional (v. 7) openjpeg2-devel-2.3.1-2.el7_7, openjpeg2-devel-docs-2.3.1-2.el7_7, openjpeg2-tools-2.3.1-2.el7_7
Fixes 1 record
Priority MEDIUM 41
OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05285 · Published 2020-01-13 · Fixed CWE-787
