Scientific Linux 7: SLSA-2020-0550-1 Critical Openjpeg2 Buffer Overflow

openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c (CVE-2020-8112) SL7 x86_64 openjpeg2-2.3.1-3.el7_7.i686.rpm openjpeg2-2.3.1-3.el7_7.x86_64.rpm openjpeg2-debuginfo-2.3.1-3.el7_7.i686.rpm openjpeg2-debuginfo-2.3.1-3.el7_7.x86_64.rpm openjpeg2-devel-2.3.1-3.el7_7.i686.rpm openjpeg2-devel-2.3.1-3.el7_7.x86_64.rpm openjpeg2-tools-2. [More...]

Synopsis:          Important: openjpeg2 security update
Advisory ID:       SLSA-2020:0550-1
Issue Date:        2020-02-19
CVE Numbers:       None
--

Security Fix(es):

* openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in
openjp2/t1.c (CVE-2020-8112)
--

SL7
  x86_64
    openjpeg2-2.3.1-3.el7_7.i686.rpm
    openjpeg2-2.3.1-3.el7_7.x86_64.rpm
    openjpeg2-debuginfo-2.3.1-3.el7_7.i686.rpm
    openjpeg2-debuginfo-2.3.1-3.el7_7.x86_64.rpm
    openjpeg2-devel-2.3.1-3.el7_7.i686.rpm
    openjpeg2-devel-2.3.1-3.el7_7.x86_64.rpm
    openjpeg2-tools-2.3.1-3.el7_7.i686.rpm
    openjpeg2-tools-2.3.1-3.el7_7.x86_64.rpm
  noarch
    openjpeg2-devel-docs-2.3.1-3.el7_7.noarch.rpm

- Scientific Linux Development Team