Red Hat Security Advisory

RHSA-2020:0296

openjpeg2 security update

Released 2020-01-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v. 8.0) openjpeg2-2.3.0-9.el8_0, openjpeg2-devel-docs-2.3.0-9.el8_0, openjpeg2-tools-2.3.0-9.el8_0

Fixes 1 record

TI-2020-05557 CVE-2020-6851 · GHSA-6gvh-974v-q8vj

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor…

MEDIUM 41

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05285 Published 2020-01-13 Fixed CWE-787