Bug 621600 (CVE-2016-7163)

Summary:	<media-libs/openjpeg-2.1.1_p20160922: Integer overflow in opj_pi_create_decode
Product:	Gentoo Linux	Reporter:	Andrey Ovcharov <sudormrfhalt>
Component:	Current packages	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	graphics+disabled, jstein
Priority:	Normal	Keywords:	PATCH
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7163
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	CVE-2016-7163-1.patch CVE-2016-7163-2.patch

Description Andrey Ovcharov 2017-06-12 15:11:53 UTC

media-libs/openjpeg-2.1.2 CVE-2016-7163

Comment 1 Andrey Ovcharov 2017-06-12 15:14:23 UTC

Created attachment 476142 [details, diff]
CVE-2016-7163-1.patch

Comment 2 Andrey Ovcharov 2017-06-12 15:14:46 UTC

Created attachment 476144 [details, diff]
CVE-2016-7163-2.patch

Comment 3 Jonas Stein gentoo-dev

2017-06-12 19:50:05 UTC

Thank you

Comment 4 Thomas Deutschmann (RETIRED) gentoo-dev

2017-06-13 21:00:25 UTC

This is already fixed in our stable =media-libs/openjpeg-2.1.1_p20160922 snapshot.