FEDORA-2016-d2ab705e4a — security update for openjpeg2

stable

openjpeg2-2.1.1-1.fc23

FEDORA-2016-d2ab705e4a created by smani 8 years ago for Fedora 23

Update to version 2.1.1, see https://github.com/uclouvain/openjpeg/releases/tag/v2.1.1 for details.

Fixes: CVE-2016-3183, CVE-2016-3181, CVE-2016-3182, CVE-2016-4796, CVE-2016-4797, CVE-2015-8871

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-d2ab705e4a

This update has been submitted for testing by smani.

8 years ago

This update has been pushed to testing.

8 years ago

kevin commented & provided feedback 8 years ago

karma

seems to work ok here.

hreindl commented & provided feedback 8 years ago

karma

works for me

This update has been submitted for stable by bodhi.

8 years ago

charims commented & provided feedback 8 years ago

karma

jpegs rendering fine

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

openjpeg2-2.1.1-1.fc23

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

BZ#1317821 CVE-2016-3183 openjpeg: Out-of-bounds read in sycc422_to_rgb function

BZ#1317822 CVE-2016-3181 openjpeg: Out-of-bounds read in opj_tcd_free_tile function

BZ#1317826 CVE-2016-3182 openjpeg: Heap corruption in opj_free function

BZ#1317830 CVE-2016-3181 openjpeg2: various flaws [fedora-all]

BZ#1335482 CVE-2016-4796 openjpeg: Heap buffer overflow in function color_cmyk_to_rgb in color.c

BZ#1335483 CVE-2016-4797 openjpeg: Division-by-zero in function opj_tcd_init_tile in tcd.c

BZ#1335484 CVE-2016-4796 CVE-2016-4797 openjpeg2: various flaws [fedora-all]

BZ#1335770 CVE-2015-8871 openjpeg: Use-after-free in opj_j2k_write_mco function

BZ#1335771 CVE-2015-8871 openjpeg2: openjpeg: Use-after-free in opj_j2k_write_mco function [fedora-all]

openjpeg2-2.1.1-1.fc23

Automated Test Results

None