FEDORA-2016-127d587a08 — security update for openjpeg2

obsolete

openjpeg2-2.1.2-3.fc23

FEDORA-2016-127d587a08 created by smani 7 years ago for Fedora 23

This update fixes CVE-2016-9580 and CVE-2016-9581.

This updates adds a patch to fix CVE-2016-9573 and CVE-2016-9572.

This update has been submitted for testing by smani.

7 years ago

This update has obsoleted openjpeg2-2.1.2-2.fc23, and has inherited its bugs and notes.

7 years ago

This update has been pushed to testing.

7 years ago

filiperosset commented & provided feedback 7 years ago

karma

no regressions noted

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

7 years ago

fale commented & provided feedback 7 years ago

karma

wfm

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

openjpeg2-2.1.2-3.fc23

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

BZ#1402718 CVE-2016-9573 CVE-2016-9572 openjpeg2: various flaws [fedora-all]

BZ#1405128 CVE-2016-9580 openjpeg2: Integer overflow in tiftoimage causes heap buffer overflow

BZ#1405135 CVE-2016-9581 openjpeg2: Infinite loop in tiftoimage resulting into heap buffer overflow in convert_32s_C1P1

BZ#1405137 CVE-2016-9580 CVE-2016-9581 openjpeg2: various flaws [fedora-all]

openjpeg2-2.1.2-3.fc23

Automated Test Results

None