Lucene search

K
mageiaGentoo FoundationMGASA-2014-0182
HistoryApr 18, 2014 - 12:33 a.m.

Updated openjpeg packages fix security vulnerability

2014-04-1800:33:54
Gentoo Foundation
advisories.mageia.org
9

0.004 Low

EPSS

Percentile

74.0%

Updated openjpeg packages fix security vulnerability: A heap-based buffer overflow was found in the way openjpeg parsed certain image files from a JPEG2000 image. If a specially-crafted image were opened by an application linked against OpenJPEG, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application (CVE-2014-0158).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchopenjpeg< 1.5.1-3.2openjpeg-1.5.1-3.2.mga3
Mageia4noarchopenjpeg< 1.5.1-4.1openjpeg-1.5.1-4.1.mga4

0.004 Low

EPSS

Percentile

74.0%