shield Security update for openjpeg2

SUSE-SLE-SERVER-12-SP3-2018-947

This update for openjpeg2 fixes the following security issues: - CVE-2015-1239: A double free vulnerability in the j2k_read_ppm_v3 function allowed remote attackers to cause a denial of service (crash) (bsc#1066713) - CVE-2017-17479: A stack-based buffer overflow in the pgxtoimage function in jpwl/convert.c could crash the converter. (bsc#1072125) - CVE-2017-17480: A stack-based buffer overflow in the pgxtovolume function in jp3d/convert.c could crash the converter. (bsc#1072124)

• Release Date
  May 22 2018
• References
  Bugzilla: 1072124, 1072125, 1066713
  CVEs: CVE-2017-17479, CVE-2017-171479, CVE-2015-1239, CVE-2017-17480
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.3 s390x

• Packages
  libopenjp2-7
  Opensource JPEG 2000 Codec Implementation

  2.1.0-4.9.1 lock rpm

  openjpeg2
  Opensource JPEG 2000 Codec Implementation

  2.1.0-4.9.1 lock src

SUSE Linux Enterprise Server 12.3 aarch64

• Packages
  libopenjp2-7
  Opensource JPEG 2000 Codec Implementation

  2.1.0-4.9.1 lock rpm

  openjpeg2
  Opensource JPEG 2000 Codec Implementation

  2.1.0-4.9.1 lock src

SUSE Linux Enterprise Server for SAP Applications 12.3 ppc64le

• Packages
  libopenjp2-7
  Opensource JPEG 2000 Codec Implementation

  2.1.0-4.9.1 lock rpm

  openjpeg2
  Opensource JPEG 2000 Codec Implementation

  2.1.0-4.9.1 lock src

SUSE Linux Enterprise Server 12.3 x86_64

• Packages
  libopenjp2-7
  Opensource JPEG 2000 Codec Implementation

  2.1.0-4.9.1 lock rpm

  openjpeg2
  Opensource JPEG 2000 Codec Implementation

  2.1.0-4.9.1 lock src