Fedora 25 : openjpeg2 (2017-f285db3668)

This update fixes CVE-2017-14040, CVE-2017-14041 and two other security vulnerabilities. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora Update for openjpeg2 FEDORA-2017-5a3cd21cee

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Heap overflow

A size-validation issue was discovered in opjj2kwritesot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service heap-based buffer overflow affecting opjwritebytesLE in lib/openjp2/cio.c or possibly remote code execution...

CVE-2017-14152

OpenJPEG 2.2.0 contains CVE-2017-14152: a mishandled zero case in opj_j2k_set_cinema_parameters (lib/openjp2/j2k.c) can cause an out-of-bounds write, potentially leading to remote denial of service or remote code execution. Affected functions include opj_write_bytes_LE (lib/openjp2/cio.c) and opj...