openjpeg -- use-after-free vulnerability

2015-08-1400:00:00

vuxml.freebsd.org

Feist Josselin reports:

Use-after-free was found in openjpeg. The vuln is fixed in
version 2.1.1 and was located in opj_j2k_write_mco function.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchopenjpeg< 2.1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	openjpeg	< 2.1.1	UNKNOWN

References

seclists.org/oss-sec/2015/q3/550

github.com/uclouvain/openjpeg/issues/563