FEDORA-2017-65e9bfa56d — enhancement update for openjpeg2

stable

openjpeg2-2.2.0-1.fc25

FEDORA-2017-65e9bfa56d created by smani 8 years ago for Fedora 25

Update to version 2.2.0, see https://github.com/uclouvain/openjpeg/blob/v2.2.0/NEWS.md for details.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-65e9bfa56d

This update has been submitted for testing by smani.

8 years ago

smani edited this update.

8 years ago

This update has been pushed to testing.

8 years ago

cserpentis commented & provided feedback 8 years ago

karma

works for me in a VM

pwalter commented & provided feedback 8 years ago

karma

Works

hreindl commented & provided feedback 8 years ago

karma

works for me

This update has been submitted for stable by bodhi.

8 years ago

This update has been pushed to stable.

8 years ago

rathann commented & provided feedback 8 years ago

This broke FFmpeg-3.2.x, which doesn't support openjpeg 2.2 without patching.

Please log in to add feedback.

Metadata

Type

enhancement

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

modified

8 years ago

Builds

openjpeg2-2.2.0-1.fc25

BZ#1390234 CVE-2016-9112 CVE-2016-9113 CVE-2016-9114 CVE-2016-9115 CVE-2016-9116 CVE-2016-9117 CVE-2016-9118 openjpeg2: Multiple security issues [fedora-all]

BZ#1418150 CVE-2016-9112 openjpeg2: Floating point exception vulnerability in openjpeg2 when processing untrusted images [fedora-all]

BZ#1435070 CVE-2016-5159 openjpeg2: chromium-browser, openjpeg: heap overflow in parsing of JPEG2000 code blocks [fedora-all]

BZ#1435071 CVE-2016-5158 openjpeg2: chromium-browser, openjpeg: heap overflow due to unsafe use of opj_aligned_malloc [fedora-all]

BZ#1435072 CVE-2016-5139 openjpeg2: chromium-browser, openjpeg: Heap overflow in parsing of JPEG2000 precincts [fedora-all]

openjpeg2-2.2.0-1.fc25

Automated Test Results

None