Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 41: OpenJPEG Important Fix for CVE-2025-54874 - Memory Threat

fedora
Calendar Grey August 13, 2025
Dist Fedora Esm H88
The latest patch for OpenJPEG on Fedora 41 addresses the CVE-2025-54874 vulnerability related to memory management that poses a security risk.
Backport fix for CVE-2025-54874.

Summary

The OpenJPEG library is an open-source JPEG 2000 library developed in order to

promote the use of JPEG 2000.

This package contains

* JPEG 2000 codec compliant with the Part 1 of the standard (Class-1 Profile-1

compliance).

* JP2 (JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multiple

component transforms for multispectral and hyperspectral imagery)

Update Information:

Backport fix for CVE-2025-54874.

Topics%20covered

Topics Covered

security advisory fedora important backport memory openjpeg

Change Log

* Sun Aug 10 2025 Sandro Mani - 2.5.3-8 - Backport fix for CVE-2025-54874 * Thu Jul 24 2025 Fedora Release Engineering - 2.5.3-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild

References


[ 1 ] Bug #2386563 - CVE-2025-54874 openjpeg: OpenJPEG OOB heap memory write [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2386563 [ 2 ] Bug #2386568 - CVE-2025-54874 openjpeg: OpenJPEG OOB heap memory write [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2386568

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-4588dcd9ee' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: openjpeg
Product: Fedora 41
Version: 2.5.3
Release: 8.fc41
URL: https://github.com/uclouvain/openjpeg
Summary: C-Library for JPEG 2000

Topics%20covered

Topics Covered

security advisory fedora important backport memory openjpeg

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here