Red Hat Security Advisory

RHSA-2020:0569

openjpeg2 security update

Released 2020-02-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v. 8.0) openjpeg2-2.3.0-10.el8_0, openjpeg2-devel-docs-2.3.0-10.el8_0, openjpeg2-tools-2.3.0-10.el8_0

Fixes 1 record

TI-2020-06530 CVE-2020-8112 · GHSA-g38x-2w55-fmr9

opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a…

MEDIUM 44

opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03624 Published 2020-01-28 Fixed CWE-787