FEDORA-2018-87c15da28c — security update for mingw-openjpeg2 and openjpeg2

stable

mingw-openjpeg2-2.3.0-6.fc29 and openjpeg2-2.3.0-10.fc29

FEDORA-2018-87c15da28c created by smani 6 years ago for Fedora 29

This update fixes CVE-2018-18088 and CVE-2018-6616

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-87c15da28c

This update has been submitted for testing by smani.

6 years ago

This update has been pushed to testing.

6 years ago

besser82 commented & provided feedback 6 years ago

karma

Works great! LGTM! =)

andilinux commented & provided feedback 6 years ago

karma

works for me

frantisekz commented & provided feedback 6 years ago

karma

Seems to work ok

This update has been submitted for batched by bodhi.

6 years ago

This update has been submitted for stable by bodhi.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

Builds

mingw-openjpeg2-2.3.0-6.fc29

openjpeg2-2.3.0-10.fc29

BZ#1542321 CVE-2018-6616 openjpeg2: Excessive iteration in openjp2/t1.c:opj_t1_encode_cblks can allow for denial of service via crafted BMP file

BZ#1542323 CVE-2018-6616 openjpeg2: Excessive iteration in openjp2/t1.c:opj_t1_encode_cblks can allow for denial of service via crafted BMP file [fedora-all]

BZ#1638558 CVE-2018-18088 openjpeg2: NULL pointer dereference in the imagetopnm function of jp2/convert.c

BZ#1638559 CVE-2018-18088 openjpeg2: NULL pointer dereference in the imagetopnm function of jp2/convert.c [fedora-all]

BZ#1638560 CVE-2018-18088 mingw-openjpeg2: openjpeg2: NULL pointer dereference in the imagetopnm function of jp2/convert.c [fedora-all]

mingw-openjpeg2-2.3.0-6.fc29

openjpeg2-2.3.0-10.fc29

Automated Test Results

ignored