Red Hat Security AdvisoryRHSA-2020:0550
openjpeg2 security update
Released 2020-02-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openjpeg2-2.3.1-3.el7_7
- Red Hat Enterprise Linux Client Optional (v. 7) openjpeg2-devel-2.3.1-3.el7_7, openjpeg2-devel-docs-2.3.1-3.el7_7, openjpeg2-tools-2.3.1-3.el7_7
- Red Hat Enterprise Linux ComputeNode (v. 7) openjpeg2-2.3.1-3.el7_7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openjpeg2-devel-2.3.1-3.el7_7, openjpeg2-devel-docs-2.3.1-3.el7_7, openjpeg2-tools-2.3.1-3.el7_7
- Red Hat Enterprise Linux Server (v. 7) openjpeg2-2.3.1-3.el7_7, openjpeg2-2.3.1-3.el7_7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) openjpeg2-devel-2.3.1-3.el7_7, openjpeg2-devel-2.3.1-3.el7_7.ppc, openjpeg2-devel-docs-2.3.1-3.el7_7 +2
- Red Hat Enterprise Linux Workstation (v. 7) openjpeg2-2.3.1-3.el7_7
- Red Hat Enterprise Linux Workstation Optional (v. 7) openjpeg2-devel-2.3.1-3.el7_7, openjpeg2-devel-docs-2.3.1-3.el7_7, openjpeg2-tools-2.3.1-3.el7_7
Fixes 1 record
Priority MEDIUM 44
opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03624 · Published 2020-01-28 · Fixed CWE-787
