Summary
[2.4.0-4]
- Fix Covscan defect
[2.4.0-3]
- Fix CVE-2021-3575 (#1969279)
- Fix resource leak identified by Covscan
[2.4.0-2]
- Fix CVE-2021-29338 (#1951332)
[2.4.0-1]
- Rebase to 2.4.0
- Resolves: CVE-2018-5727 (#1538467)
- Resolves: CVE-2018-5785 (#1538556)
- Resolves: CVE-2018-20845 (#1730679)
- Resolves: CVE-2018-20847 (#1734337)
- Resolves: CVE-2019-12973 (#1739076)
- Resolves: CVE-2020-15389 (#1855115)
- Resolves: CVE-2020-27814 (#1908965)
- Resolves: CVE-2020-27823 (#1906222)
- Resolves: CVE-2020-27824 (#1906216)
- Resolves: CVE-2020-27842 (#1908165)
- Resolves: CVE-2020-27843 (#1908164)
- Resolves: CVE-2020-27845 (#1908168)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | openjpeg2 | 0:2.4.0-4.el8 |
| Oracle Linux · 8 | openjpeg2-devel | 0:2.4.0-4.el8 |
| Oracle Linux · 8 | openjpeg2-devel-docs | 0:2.4.0-4.el8 |
| Oracle Linux · 8 | openjpeg2-tools | 0:2.4.0-4.el8 |
Vulnerabilities 14
-
Unscored —
Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJ…
-
Unscored —
An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in…
-
Unscored —
In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c). Remot…
-
Unscored —
In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder func…
-
Unscored —
In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers c…
-
Unscored —
jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid an…
-
Unscored —
A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw…
-
Unscored —
A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to Open…
-
Unscored —CVE-2020-27824 Public exploit
A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker …
-
Unscored —
There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to…
-
Unscored —
A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted inpu…
-
Unscored —
There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrus…
-
Unscored —
Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS)…
-
Unscored —
A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2…