[Pkg-phototools-devel] Bug#838690: openjpeg2: CVE-2016-7445: Null pointer dereference in convert.c

[Salvatore Bonaccorso]

Source: openjpeg2
Version: 2.1.0-2
Severity: important
Tags: security upstream
Forwarded: https://github.com/uclouvain/openjpeg/issues/843

Hi,

the following vulnerability was published for openjpeg2.

CVE-2016-7445[0]:
openjpeg null ptr dereference in convert.c

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-7445
[1] https://github.com/uclouvain/openjpeg/issues/843
[2] http://seclists.org/oss-sec/2016/q3/546

Regards,
Salvatore