Oval Definition:oval:org.opensuse.security:def:118876
Revision Date:2022-04-21Version:1
Title:Security update for openjpeg (Important)
Description:

This update for openjpeg fixes the following issues:

- CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016). - CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881). - CVE-2020-8112: Fixed a heap buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090). - CVE-2020-15389: Fixed a use-after-free if a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578). - CVE-2020-27823: Fixed a heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457), - CVE-2021-29338: Fixed an integer Overflow allows remote attackers to crash the application (bsc#1184774).
Family:unixClass:patch
Status:Reference(s):1102016
1106881
1162090
1173578
1180457
1184774
CVE-2018-14423
CVE-2018-16376
CVE-2020-15389
CVE-2020-27823
CVE-2020-8112
CVE-2021-29338
SUSE-SU-2022:1296-1
Platform(s):SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS is installed
  • AND Package Information
  • libopenjpeg1-1.5.2-150000.4.5.1 is installed
  • OR openjpeg-devel-1.5.2-150000.4.5.1 is installed
  • BACK