Skip to content
OpenAdvisories
Unscored RHSA-2012:1068 2 CVEs

Red Hat Security Advisory: openjpeg security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client openjpeg 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client openjpeg-debuginfo 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client openjpeg-devel 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client openjpeg-libs 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode openjpeg 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode openjpeg-debuginfo 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode openjpeg-devel 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::computenode openjpeg-libs 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server openjpeg 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server openjpeg-debuginfo 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server openjpeg-devel 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server openjpeg-libs 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation openjpeg 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation openjpeg-debuginfo 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation openjpeg-devel 0:1.3-8.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation openjpeg-libs 0:1.3-8.el6_3

Vulnerabilities 2

  • Unscored —

    The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service …

  • Unscored —

    Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to ca…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=812317
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=835767
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1068.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-5030
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-5030
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-5030
  • report
    https://access.redhat.com/security/cve/CVE-2012-3358
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-3358
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-3358