| Revision Date: | 2022-04-19 | Version: | 1 |
| Title: | Security update for openjpeg2 (Important) |
| Description: |
This update for openjpeg2 fixes the following issues:
- CVE-2018-5727: Fixed integer overflow vulnerability in theopj_t1_encode_cblks function (bsc#1076314). - CVE-2018-5785: Fixed integer overflow caused by an out-of-bounds leftshift in the opj_j2k_setup_encoder function (bsc#1076967). - CVE-2018-6616: Fixed excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c (bsc#1079845). - CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016). - CVE-2018-16375: Fixed missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c (bsc#1106882). - CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881). - CVE-2018-20845: Fixed division-by-zero in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.ci (bsc#1140130). - CVE-2020-6851: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor (bsc#1160782). - CVE-2020-8112: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090). - CVE-2020-15389: Fixed use-after-free if t a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578). - CVE-2020-27823: Fixed heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457). - CVE-2021-29338: Fixed integer overflow that allows remote attackers to crash the application (bsc#1184774). - CVE-2022-1122: Fixed segmentation fault in opj2_decompress due to uninitialized pointer (bsc#1197738).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1076314
1076967
1079845
1102016
1106881
1106882
1140130
1160782
1162090
1173578
1180457
1184774
1197738
CVE-2013-2124
CVE-2013-2124
CVE-2013-4419
CVE-2013-4419
CVE-2014-3230
CVE-2018-14423
CVE-2018-16375
CVE-2018-16376
CVE-2018-20845
CVE-2018-5727
CVE-2018-5785
CVE-2018-6616
CVE-2020-15389
CVE-2020-27823
CVE-2020-6851
CVE-2020-8112
CVE-2021-29338
CVE-2022-1122
SUSE-SU-2022:1252-1
|
| Platform(s): | openSUSE 13.2
SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 15 SP2
SUSE Linux Enterprise Desktop 15 SP3
SUSE Linux Enterprise for SAP 12
SUSE Linux Enterprise High Availability 15
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise High Performance Computing 15 SP3
SUSE Linux Enterprise Module for additional PackageHub packages 15
SUSE Linux Enterprise Module for Basesystem 15 SP2
SUSE Linux Enterprise Module for Basesystem 15 SP3
SUSE Linux Enterprise Module for Desktop Applications 15
SUSE Linux Enterprise Module for Development Tools 15
SUSE Linux Enterprise Module for High Performance Computing 15
SUSE Linux Enterprise Module for Legacy Software 15
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
SUSE Linux Enterprise Module for Public Cloud 15
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP3
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Storage 7
SUSE Linux Enterprise Storage 7.1
SUSE Linux Enterprise Workstation Extension 15
SUSE Manager Proxy 4.1
SUSE Manager Proxy 4.2
SUSE Manager Retail Branch Server 4.2
SUSE Manager Server 4.1
SUSE Manager Server 4.2
| Product(s): | |
| Definition Synopsis |
| SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND haproxy-1.5.4-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
avahi-0.6.31-20 is installed
OR avahi-lang-0.6.31-20 is installed
OR libavahi-client3-0.6.31-20 is installed
OR libavahi-client3-32bit-0.6.31-20 is installed
OR libavahi-common3-0.6.31-20 is installed
OR libavahi-common3-32bit-0.6.31-20 is installed
OR libavahi-core7-0.6.31-20 is installed
OR libdns_sd-0.6.31-20 is installed
OR libdns_sd-32bit-0.6.31-20 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND Package Information
ImageMagick-6.8.8.1-8 is installed
OR libMagick++-6_Q16-3-6.8.8.1-8 is installed
OR libMagickCore-6_Q16-1-6.8.8.1-8 is installed
OR libMagickCore-6_Q16-1-32bit-6.8.8.1-8 is installed
OR libMagickWand-6_Q16-1-6.8.8.1-8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
emacs-24.3-19 is installed
OR emacs-info-24.3-19 is installed
OR emacs-x11-24.3-19 is installed
OR etags-24.3-19 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
AND perl-LWP-Protocol-https-6.06-1.24 is installed
|
| Definition Synopsis |
| Release Information
SUSE Linux Enterprise Desktop 15 SP3 is installed
OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed
OR SUSE Linux Enterprise Server 15 SP3 is installed
OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
OR SUSE Linux Enterprise Storage 7.1 is installed
OR SUSE Manager Proxy 4.2 is installed
OR SUSE Manager Retail Branch Server 4.2 is installed
OR SUSE Manager Server 4.2 is installed
AND Package Information
libopenjp2-7-2.3.0-150000.3.5.1 is installed
OR openjpeg2-2.3.0-150000.3.5.1 is installed
OR openjpeg2-devel-2.3.0-150000.3.5.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 15 is installed
AND Package Information
ctdb-4.7.8+git.86.94b6d10f7dd-4.15 is installed
OR samba-4.7.8+git.86.94b6d10f7dd-4.15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed
AND Package Information
glib2-2.54.3-4.7 is installed
OR glib2-devel-32bit-2.54.3-4.7 is installed
OR glib2-tools-32bit-2.54.3-4.7 is installed
OR libgthread-2_0-0-32bit-2.54.3-4.7 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Basesystem 15 SP2 is installed
AND perl-LWP-Protocol-https-6.06-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Desktop Applications 15 is installed
AND Package Information
SDL-1.2.15-3.9 is installed
OR libSDL-1_2-0-1.2.15-3.9 is installed
OR libSDL-devel-1.2.15-3.9 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Development Tools 15 is installed
AND ocaml-libguestfs-devel-1.38.0-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for High Performance Computing 15 is installed
AND Package Information
python-numpy_1_14_0-gnu-hpc-1.14.0-4.5 is installed
OR python2-numpy-gnu-hpc-1.14.0-4.5 is installed
OR python2-numpy-gnu-hpc-devel-1.14.0-4.5 is installed
OR python2-numpy_1_14_0-gnu-hpc-1.14.0-4.5 is installed
OR python2-numpy_1_14_0-gnu-hpc-devel-1.14.0-4.5 is installed
OR python3-numpy-gnu-hpc-1.14.0-4.5 is installed
OR python3-numpy-gnu-hpc-devel-1.14.0-4.5 is installed
OR python3-numpy_1_14_0-gnu-hpc-1.14.0-4.5 is installed
OR python3-numpy_1_14_0-gnu-hpc-devel-1.14.0-4.5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Legacy Software 15 is installed
AND Package Information
java-1_8_0-openjdk-1.8.0.171-3.3 is installed
OR java-1_8_0-openjdk-demo-1.8.0.171-3.3 is installed
OR java-1_8_0-openjdk-devel-1.8.0.171-3.3 is installed
OR java-1_8_0-openjdk-headless-1.8.0.171-3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 is installed
AND Package Information
kernel-livepatch-4_12_14-25_3-default-3-2 is installed
OR kernel-livepatch-SLE15_Update_1-3-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
AND Package Information
php7-7.2.5-4.35 is installed
OR php7-embed-7.2.5-4.35 is installed
OR php7-readline-7.2.5-4.35 is installed
OR php7-sodium-7.2.5-4.35 is installed
OR php7-tidy-7.2.5-4.35 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Public Cloud 15 is installed
AND Package Information
kernel-azure-4.12.14-5.13 is installed
OR kernel-azure-base-4.12.14-5.13 is installed
OR kernel-azure-devel-4.12.14-5.13 is installed
OR kernel-devel-azure-4.12.14-5.13 is installed
OR kernel-source-azure-4.12.14-5.13 is installed
OR kernel-syms-azure-4.12.14-5.13 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 is installed
AND Package Information
util-linux-systemd-2.31.1-9.3 is installed
OR uuidd-2.31.1-9.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 15 is installed
AND Package Information
nodejs8-8.11.3-3.5 is installed
OR nodejs8-devel-8.11.3-3.5 is installed
OR nodejs8-docs-8.11.3-3.5 is installed
OR npm8-8.11.3-3.5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 is installed
AND Package Information
evince-3.10.3-1.213 is installed
OR evince-lang-3.10.3-1.213 is installed
OR libevdocument3-4-3.10.3-1.213 is installed
OR libevview3-3-3.10.3-1.213 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
fuse-2.9.3-5.1 is installed
OR libfuse2-2.9.3-5.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 is installed
AND Package Information
kernel-default-4.12.14-25.13 is installed
OR kernel-default-extra-4.12.14-25.13 is installed
|