[SECURITY] Fedora 20 Update: openjpeg-1.5.1-13.fc20

OpenJPEG is an open-source JPEG 2000 codec written in C. It has been developed in order to promote the use of JPEG 2000, the new still-image compression standard from the Joint Photographic Experts Group JPEG...

Fedora 20 : openjpeg-1.5.1-13.fc20 (2014-12507)

Fixing CVE-2013-6045 without regressions - Adding check for invalid offsets Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] Fedora 21 Update: openjpeg-1.5.1-13.fc21

OpenJPEG is an open-source JPEG 2000 codec written in C. It has been developed in order to promote the use of JPEG 2000, the new still-image compression standard from the Joint Photographic Experts Group JPEG...

Fedora 21 : openjpeg-1.5.1-13.fc21 (2014-12458)

Fixing CVE-2013-6045 without regressions - Adding check for invalid offsets Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

openSUSE Security Update : openjpeg (openSUSE-SU-2012:1370-1)

This update fixes a heap-based buffer overflow in OpenJPEG which could allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted JPEG2000 file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

FreeBSD : openjpeg -- Multiple vulnerabilities (02db20d7-e34a-11e3-bd92-bcaec565249c)

Openjpeg release notes report : That CVE-2012-3535 and CVE-2012-3358 are fixed in the 1.5.1 release. That CVE-2013-4289, CVE-2013-4290, CVE-2013-1447, CVE-2013-6045, CVE-2013-6052, CVE-2013-6054, CVE-2013-6053, CVE-2013-6887, where fixed in the 1.5.2 release. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2013-6053

OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read...

Heap overflow

OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read...

CVE-2013-6053

OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read...

CVE-2013-6053

OpenJPEG 1.5.1 (CVE-2013-6053) is affected by a heap-based out-of-bounds read that could allow a remote attacker to obtain sensitive information via unspecified vectors. Public advisories (GLSA 2014-412-24, Fedora update FEDORA-2014-17053/12507, Gentoo GLSA and OpenVAS entries) confirm multiple O...

CVE-2013-6053

OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read...

CVE-2013-6887

OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors...

CVE-2013-6887

OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors...

Null pointer dereference

OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors...

CVE-2013-6887

OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors...

CVE-2013-6887

OpenJPEG 1.5.1 is affected by CVE-2013-6887, allowing remote denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors. The issue is documented in multiple sources (NVD entry for CVE-2013-6887 and related open-source advisories). The prov...

[SECURITY] [DSA 2808-2] openjpeg regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2808-2 [email protected] http://www.debian.org/security/ Raphael Geissert April 22, 2014 http://www.debian.org/security/faq -...

DSA-2808-2 openjpeg - regression update

Bulletin has no description...

CVE-2013-4290

Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to 1 lib/openjp3d/opjjp3dcompress.c, 2 bin/jp3d/convert.c, or 3 lib/openjp3d/event.c...

CVE-2013-4289

Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow...