Summary
OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.
Security Fix(es):
* openjpeg: heap buffer overflow in bin/common/color.c (CVE-2024-56826)
* openjpeg: heap buffer overflow in lib/openjp2/j2k.c (CVE-2024-56827)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | openjpeg2 | 2.4.0-8.el9 |
| AlmaLinux · 9 | openjpeg2-devel | 2.4.0-8.el9 |
| AlmaLinux · 9 | openjpeg2-tools | 2.4.0-8.el9 |
Vulnerabilities 2
-
Medium 5.6
Openjpeg: heap buffer overflow in bin/common/color.c
A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.
-
Medium 5.6
Openjpeg: heap buffer overflow in lib/openjp2/j2k.c
A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.