Summary: | <media-libs/openjpeg-2.3.0: multiple vulnerabilities | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Aleksandr Wagner (Kivak) <alwag> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | graphics+disabled |
Priority: | Normal | Keywords: | STABLEREQ |
Version: | unspecified | Flags: | stable-bot:
sanity-check+
|
Hardware: | All | ||
OS: | Linux | ||
URL: | https://bugzilla.redhat.com/show_bug.cgi?id=1487768 | ||
Whiteboard: | B3 [glsa cve cleanup] | ||
Package list: |
media-libs/openjpeg-2.3.0
|
Runtime testing required: | --- |
Description
Aleksandr Wagner (Kivak)
2017-09-02 14:49:16 UTC
2.3.0 is in tree. It fixes several other vulnerabilities like this: https://blogs.gentoo.org/ago/2017/08/28/openjpeg-stack-based-buffer-overflow-write-in-pgxtoimage-convert-c/ Can we stabilize? @ Arches, please test and mark stable: =media-libs/openjpeg-2.3.0 hppa stable Stable on amd64 x86 stable ia64 stable ppc/ppc64 stable arm stable Stable on alpha. @maintainers, please clean the vulnerable versions. This issue was resolved and addressed in GLSA 201710-26 at https://security.gentoo.org/glsa/201710-26 by GLSA coordinator Aaron Bauman (b-man). commit 43ba3bc2fbc5d86243cf8c68ff825eaa34bd1146 Author: Mart Raudsepp <leio@gentoo.org> Date: Sat Mar 3 14:14:07 2018 +0200 media-libs/openjpeg-2.3.0: arm64 stable |