Summary
[1.5.1-16]
- Revert previous changes in patch for CVE-2016-5159
- Fix memory leaks
Related: #1419772
[1.5.1-15]
- Add two more allocation checks to patch for CVE-2016-5159
Related: #1419772
[1.5.1-14]
- Fix CWE-825 errors in patch for CVE-2016-5158
Related: #1419772
[1.5.1-13]
- Add patches for CVE-2016-5139, CVE-2016-5158, CVE-2016-5159
Related: #1419772
[1.5.1-12]
- Fix patch name: CVE-2016-9675 => CVE-2016-7163
Related: #1419772
[1.5.1-11]
- Fix decoding of chroma-subsampled images
- Add patches for CVE-2016-9573 and CVE-2016-9675
- Fix Coverity issues
Resolves: #1419772
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | openjpeg | 0:1.5.1-16.el7_3 |
| Oracle Linux · 7 | openjpeg-devel | 0:1.5.1-16.el7_3 |
| Oracle Linux · 7 | openjpeg-libs | 0:1.5.1-16.el7_3 |
Vulnerabilities 6
-
Medium 6.5
An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially craft…
-
Unscored —
Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome b…
-
Unscored —
Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome b…
-
Unscored —
Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and …
-
Unscored —
Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary …
-
Unscored —
openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause t…