FEDORA-2017-a5bb95b447 — security update for openjpeg2

stable

openjpeg2-2.2.0-3.fc27

FEDORA-2017-a5bb95b447 created by pbrobinson 7 years ago for Fedora 27

This update fixes CVE-2017-12982, CVE-2017-14040, CVE-2017-14041 and two other security vulnerabilities.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-a5bb95b447

This update has been submitted for testing by pbrobinson.

7 years ago

This update has been pushed to testing.

7 years ago

pwalter commented & provided feedback 7 years ago

karma

Works

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

This update has been submitted for stable by pbrobinson.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

openjpeg2-2.2.0-3.fc27

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

6 years ago

BZ#1487236 CVE-2017-12982 openjpeg: Memory allocation failure in the opj_image_create function

BZ#1487347 CVE-2017-14041 openjpeg: Stack-based buffer over-write in pgxtoimage function in bin/jp2/convert.c

BZ#1487361 CVE-2017-14040 openjpeg: Invalid write access in bin/jp2/convert.c

BZ#1487364 CVE-2017-14040 CVE-2017-14041 openjpeg2: various flaws [fedora-all]

BZ#1487389 CVE-2017-14152 openjpeg: Heap-based buffer overflow in opj_write_bytes_LE in cio.c

BZ#1487390 CVE-2017-14151 openjpeg: Heap-based buffer overflow in opj_mqc_flush in mqc.c

BZ#1487394 CVE-2017-14151 CVE-2017-14152 openjpeg2: various flaws [fedora-all]

openjpeg2-2.2.0-3.fc27

Automated Test Results

None