Red Hat Security AdvisoryRHSA-2020:0274
openjpeg2 security update
Released 2020-01-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) openjpeg2-devel-2.3.1-2.el8_1, openjpeg2-tools-2.3.1-2.el8_1
- Red Hat Enterprise Linux AppStream (v. 8) openjpeg2-2.3.1-2.el8_1, openjpeg2-devel-docs-2.3.1-2.el8_1, openjpeg2-tools-2.3.1-2.el8_1
Fixes 1 record
Priority MEDIUM 41
OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05285 · Published 2020-01-13 · Fixed CWE-787
