Fedora 26 : openjpeg2 (2017-920b27e8f4)

Update to version 2.2.0, see https://github.com/uclouvain/openjpeg/blob/v2.2.0/NEWS.md for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much a...

Fedora Update for openjpeg2 FEDORA-2017-920b27e8f4

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED12 / SLES12 Security Update : openjpeg2 (SUSE-SU-2017:2144-1)

This update for openjpeg2 fixes the following issues : - CVE 2016-7163: Integer Overflow could lead to remote code execution bsc997857. - CVE 2015-8871: Use-after-free in opjj2kwritemco function could lead to denial of service bsc979907. Note that Tenable Network Security has extracted the...

SUSE-SU-2017:2144-1 Security update for openjpeg2

This update for openjpeg2 fixes the following issues: - CVE 2016-7163: Integer Overflow could lead to remote code execution bsc997857. - CVE 2015-8871: Use-after-free in opjj2kwritemco function could lead to denial of service bsc979907...

AZL-44508 CVE-2017-9937 affecting package openjpeg2 2.3.1-12

In LibTIFF 4.0.8, there is a memory malloc failure in tifjbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack...

AZL-45366 CVE-2016-9843 affecting package openjpeg2 2.3.1-12

The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation...

AZL-44046 CVE-2016-9840 affecting package openjpeg2 2.3.1-12

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...

AZL-45183 CVE-2016-9842 affecting package openjpeg2 2.3.1-12

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers...

AZL-45087 CVE-2016-9841 affecting package openjpeg2 2.3.1-12

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic...

openSUSE: Security Advisory for openjpeg2 (openSUSE-SU-2017:0155-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-44601 CVE-2016-10165 affecting package openjpeg2 2.3.1-12

The TypeMLURead function in cmstypes.c in Little CMS aka lcms2 allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read...

AZL-45150 CVE-2017-5563 affecting package openjpeg2 2.3.1-12

LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tiflzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff...

Debian DSA-3768-1 : openjpeg2 - security update

Multiple vulnerabilities in OpenJPEG, a JPEG 2000 image compression / decompression library, may result in denial of service or the execution of arbitrary code if a malformed JPEG 2000 file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

[SECURITY] [DSA 3678-1] openjpeg2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3768-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 20, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3768-1 (openjpeg2 - security update)

Multiple vulnerabilities in OpenJPEG, a JPEG 2000 image compression / decompression library, may result in denial of service or the execution of arbitrary code if a malformed JPEG 2000 file is processed. OpenVAS Vulnerability Test $Id: deb3768.nasl 6607 2017-07-07 12:04:25Z cfischer $...

openSUSE: Security Advisory for openjpeg2 (openSUSE-SU-2017:0207-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : openjpeg2 (openSUSE-2017-120)

This update for openjpeg2 fixes the following issues : - CVE-2016-9572 CVE-2016-9573: Insuficient check in imagetopnm could lead to heap buffer overflow bsc1014543 - CVE-2016-9580, CVE-2016-9581: Possible Heap buffer overflow via integer overflow and infite loop bsc1014975 - CVE-2016-7445: NULL...

Security update for openjpeg2 (important)

This update for openjpeg2 fixes the following issues: CVE-2016-9572 CVE-2016-9573: Insuficient check in imagetopnm could lead to heap buffer overflow bsc1014543 CVE-2016-9580, CVE-2016-9581: Possible Heap buffer overflow via integer overflow and infite loop bsc1014975 CVE-2016-7445: Null pointer...

Debian: Security Advisory (DSA-3768-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : openjpeg2 (openSUSE-2017-108)

This update for openjpeg2 fixes the following issues : - CVE-2016-9572 CVE-2016-9573: Insuficient check in imagetopnm could lead to heap buffer overflow bsc1014543 - CVE-2016-9580, CVE-2016-9581: Possible Heap buffer overflow via integer overflow and infite loop bsc1014975 - CVE-2016-7445: NULL...