Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 40 Advisory FEDORA-2024-272544ceb9: Critical Heap Overflow Fix

fedora
Calendar Grey January 9, 2025
Dist Fedora Esm H88
# Resolution for heap buffer overflow in openjpeg2 library through Fedora advisory update for 2024.
Update to openjpeg-2.5.3 Fix 2 heap-buffer-overflow

Summary

The OpenJPEG library is an open-source JPEG 2000 library developed in order to

promote the use of JPEG 2000.

This package contains

* JPEG 2000 codec compliant with the Part 1 of the standard (Class-1 Profile-1

compliance).

* JP2 (JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multiple

component transforms for multispectral and hyperspectral imagery)

Update Information:

Update to openjpeg-2.5.3 Fix 2 heap-buffer-overflow

Topics%20covered

Topics Covered

security advisory Fedora release update heap buffer openjpeg2

Change Log

* Tue Dec 24 2024 Sérgio Basto - 2.5.3-1 - Update to 2.5.3

References


[ 1 ] Bug #2333951 - heap-buffer-overflow at lib/openjp2/j2k.c:8460:84 in opj_j2k_add_tlmarker in openjpeg/opj_decompress https://bugzilla.redhat.com/show_bug.cgi?id=2333951 [ 2 ] Bug #2333954 - heap-buffer-overflow at bin/common/color.c:215:42 in sycc422_to_rgb in openjpeg/opj_decompress https://bugzilla.redhat.com/show_bug.cgi?id=2333954

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-272544ceb9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: openjpeg2
Product: Fedora 40
Version: 2.5.3
Release: 1.fc40
URL: https://github.com/uclouvain/openjpeg
Summary: C-Library for JPEG 2000

Topics%20covered

Topics Covered

security advisory Fedora release update heap buffer openjpeg2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here