ELSA-2020-0274

Опубликовано: 29 янв. 2020

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2020-0274: openjpeg2 security update (IMPORTANT)

[2.3.1-2]

Fix CVE-2020-6851 (#1790589)

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

openjpeg2

2.3.1-2.el8_1

openjpeg2-devel

2.3.1-2.el8_1

openjpeg2-devel-docs

2.3.1-2.el8_1

openjpeg2-tools

2.3.1-2.el8_1

Oracle Linux x86_64

openjpeg2

2.3.1-2.el8_1

openjpeg2-devel

2.3.1-2.el8_1

openjpeg2-devel-docs

2.3.1-2.el8_1

openjpeg2-tools

2.3.1-2.el8_1

Связанные CVE

CVE-2020-6851

Ссылки на источники

Связанные уязвимости

CVE-2020-6851

CVSS3: 7.5

ubuntu

около 6 лет назад

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.

CVE-2020-6851

CVSS3: 8.1

redhat

около 6 лет назад

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.

CVE-2020-6851

CVSS3: 7.5

nvd

около 6 лет назад

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.

CVE-2020-6851

CVSS3: 7.5

debian

около 6 лет назад

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl ...

GHSA-6gvh-974v-q8vj

CVSS3: 7.5

github

больше 3 лет назад

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in libopenjp2.so.