Lucene search

K
suseSuseOPENSUSE-SU-2018:1438-1
HistoryMay 28, 2018 - 12:07 p.m.

Security update for opencv (important)

2018-05-2812:07:06
lists.opensuse.org
197

0.017 Low

EPSS

Percentile

86.2%

This update for opencv fixes the following issues:

  • CVE-2018-5268: Fixed a heap-based buffer overflow in
    incv::Jpeg2KDecoder::readComponent8u in
    modules/imgcodecs/src/grfmt_jpeg2000.cppwhen parsing a crafted image
    file. (boo#1075017)
  • CVE-2017-17760: Fixed an buffer overflow in function
    cv::PxMDecoder::readData (boo#1074313)
  • CVE-2017-18009: Fixed a heap-based buffer over-read in function
    cv::HdrDecoder::checkSignature (boo#1074312)
  • CVE-2017-1000450: Functions FillUniColor and FillUniGray do not check
    the input length which could lead to out of bounds writes and crashes
    (boo#1074487)
  • CVE-2018-5269: Fixed an assertion failure happens in
    cv::RBaseStream::setPos inmodules/imgcodecs/src/bitstrm.cpp because of
    an incorrect integer cast (bsc#1075019).