Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | openjpeg | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::client | openjpeg-debuginfo | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::client | openjpeg-devel | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::client | openjpeg-libs | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | openjpeg | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | openjpeg-debuginfo | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | openjpeg-devel | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | openjpeg-libs | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | openjpeg | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | openjpeg-debuginfo | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | openjpeg-devel | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | openjpeg-libs | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | openjpeg | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | openjpeg-debuginfo | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | openjpeg-devel | 0:1.5.1-16.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | openjpeg-libs | 0:1.5.1-16.el7_3 |
Vulnerabilities 6
-
Medium 6.5
An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool. Converting a specially craft…
-
Unscored —
Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome b…
-
Unscored —
Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome b…
-
Unscored —
Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and …
-
Unscored —
Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary …
-
Unscored —
openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause t…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1363982
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1372219
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1372220
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1374329
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1382202
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1402711
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0838.json
-
report
https://access.redhat.com/security/cve/CVE-2016-5139
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5139
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5139
-
article
https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop.html
-
report
https://access.redhat.com/security/cve/CVE-2016-5158
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5158
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5158
-
article
https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html
-
report
https://access.redhat.com/security/cve/CVE-2016-5159
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-5159
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-5159
-
report
https://access.redhat.com/security/cve/CVE-2016-7163
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-7163
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-7163
-
report
https://access.redhat.com/security/cve/CVE-2016-9573
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-9573
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-9573
-
report
https://access.redhat.com/security/cve/CVE-2016-9675
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-9675
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-9675
-
article
http://seclists.org/oss-sec/2016/q3/624