[Secure-testing-commits] r56748 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Mon Oct 16 11:22:21 UTC 2017
Author: carnil
Date: 2017-10-16 11:22:21 +0000 (Mon, 16 Oct 2017)
New Revision: 56748
Modified:
data/CVE/list
Log:
CVE-2017-14040 fixed in unstable
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-10-16 11:22:10 UTC (rev 56747)
+++ data/CVE/list 2017-10-16 11:22:21 UTC (rev 56748)
@@ -4657,7 +4657,7 @@
NOTE: Reproducer: https://blogs.gentoo.org/ago/2017/08/28/openjpeg-stack-based-buffer-overflow-write-in-pgxtoimage-convert-c/
NOTE: https://github.com/uclouvain/openjpeg/issues/997
CVE-2017-14040 (An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG ...)
- - openjpeg2 <unfixed> (bug #874117)
+ - openjpeg2 2.3.0-1 (bug #874117)
NOTE: Fixed by: https://github.com/uclouvain/openjpeg/commit/2cd30c2b06ce332dede81cccad8b334cde997281
NOTE: Reproducer: https://blogs.gentoo.org/ago/2017/08/28/openjpeg-invalid-memory-write-in-tgatoimage-convert-c/
NOTE: https://github.com/uclouvain/openjpeg/issues/995
More information about the Secure-testing-commits
mailing list