Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 22: 2015-15928 Critical: Openjpeg2 Use After Free

fedora
Calendar Grey October 1, 2015
Dist Fedora Esm H88
Patch released for openjpeg2 in Fedora 22 resolving a use-after-free flaw, essential for secure image handling.
Security fix for use after free vulnerability

Summary

The OpenJPEG library is an open-source JPEG 2000 library developed in order to

promote the use of JPEG 2000.

This package contains

* JPEG 2000 codec compliant with the Part 1 of the standard (Class-1 Profile-1

compliance).

* JP2 (JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multiple

component transforms for multispectral and hyperspectral imagery)

Update Information:

Security fix for use after free vulnerability

Topics%20covered

Topics Covered

security advisory Fedora security fix image processing use after free openjpeg2 JPEG 2000

Change Log

References


[ 1 ] Bug #1263359 - openjpeg: Use-after-free vulnerability in opj_j2k_write_mco https://bugzilla.redhat.com/show_bug.cgi?id=1263359

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update openjpeg2' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: openjpeg2
Product: Fedora 22
Version: 2.1.0
Release: 6.fc22
URL: https://github.com/uclouvain/openjpeg
Summary: C-Library for JPEG 2000

Topics%20covered

Topics Covered

security advisory Fedora security fix image processing use after free openjpeg2 JPEG 2000

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here