Red Hat Security AdvisoryRHSA-2020:0570
openjpeg2 security update
Released 2020-02-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) openjpeg2-devel-2.3.1-3.el8_1, openjpeg2-tools-2.3.1-3.el8_1
- Red Hat Enterprise Linux AppStream (v. 8) openjpeg2-2.3.1-3.el8_1, openjpeg2-devel-docs-2.3.1-3.el8_1, openjpeg2-tools-2.3.1-3.el8_1
Fixes 1 record
Priority MEDIUM 44
opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03624 · Published 2020-01-28 · Fixed CWE-787
