(RHSA-2012:1283) Important: openjpeg security update

2012-09-1700:00:00

access.redhat.com

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.047 Low

EPSS

Percentile

91.7%

JSON

OpenJPEG is an open source library for reading and writing image files in
JPEG 2000 format.

It was found that OpenJPEG failed to sanity-check an image header field
before using it. A remote attacker could provide a specially-crafted image
file that could cause an application linked against OpenJPEG to crash or,
possibly, execute arbitrary code. (CVE-2012-3535)

This issue was discovered by Huzaifa Sidhpurwala of the Red Hat Security
Response Team.

Users of OpenJPEG should upgrade to these updated packages, which contain
a patch to correct this issue. All running applications using OpenJPEG
must be restarted for the update to take effect.

OSVersionArchitecturePackageVersionFilename
RedHat6x86_64openjpeg< 1.3-9.el6_3openjpeg-1.3-9.el6_3.x86_64.rpm
RedHat6x86_64openjpeg-debuginfo< 1.3-9.el6_3openjpeg-debuginfo-1.3-9.el6_3.x86_64.rpm
RedHat6s390xopenjpeg-libs< 1.3-9.el6_3openjpeg-libs-1.3-9.el6_3.s390x.rpm
RedHat6s390xopenjpeg-debuginfo< 1.3-9.el6_3openjpeg-debuginfo-1.3-9.el6_3.s390x.rpm
RedHat6i686openjpeg-libs< 1.3-9.el6_3openjpeg-libs-1.3-9.el6_3.i686.rpm
RedHat6s390openjpeg-libs< 1.3-9.el6_3openjpeg-libs-1.3-9.el6_3.s390.rpm
RedHat6x86_64openjpeg-libs< 1.3-9.el6_3openjpeg-libs-1.3-9.el6_3.x86_64.rpm
RedHat6i686openjpeg< 1.3-9.el6_3openjpeg-1.3-9.el6_3.i686.rpm
RedHat6s390openjpeg-debuginfo< 1.3-9.el6_3openjpeg-debuginfo-1.3-9.el6_3.s390.rpm
RedHat6x86_64openjpeg-devel< 1.3-9.el6_3openjpeg-devel-1.3-9.el6_3.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	6	x86_64	openjpeg	< 1.3-9.el6_3	openjpeg-1.3-9.el6_3.x86_64.rpm
RedHat	6	x86_64	openjpeg-debuginfo	< 1.3-9.el6_3	openjpeg-debuginfo-1.3-9.el6_3.x86_64.rpm
RedHat	6	s390x	openjpeg-libs	< 1.3-9.el6_3	openjpeg-libs-1.3-9.el6_3.s390x.rpm
RedHat	6	s390x	openjpeg-debuginfo	< 1.3-9.el6_3	openjpeg-debuginfo-1.3-9.el6_3.s390x.rpm
RedHat	6	i686	openjpeg-libs	< 1.3-9.el6_3	openjpeg-libs-1.3-9.el6_3.i686.rpm
RedHat	6	s390	openjpeg-libs	< 1.3-9.el6_3	openjpeg-libs-1.3-9.el6_3.s390.rpm
RedHat	6	x86_64	openjpeg-libs	< 1.3-9.el6_3	openjpeg-libs-1.3-9.el6_3.x86_64.rpm
RedHat	6	i686	openjpeg	< 1.3-9.el6_3	openjpeg-1.3-9.el6_3.i686.rpm
RedHat	6	s390	openjpeg-debuginfo	< 1.3-9.el6_3	openjpeg-debuginfo-1.3-9.el6_3.s390.rpm
RedHat	6	x86_64	openjpeg-devel	< 1.3-9.el6_3	openjpeg-devel-1.3-9.el6_3.x86_64.rpm