[Pkg-phototools-devel] Bug#950184: openjpeg2: CVE-2020-8112

Salvatore Bonaccorso carnil at debian.org
Wed Jan 29 21:10:11 GMT 2020

Source: openjpeg2
Version: 2.3.1-1
Severity: important
Tags: security upstream
Forwarded: https://github.com/uclouvain/openjpeg/issues/1231


The following vulnerability was published for openjpeg2.

| opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through
| 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a
| different issue than CVE-2020-6851.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2020-8112
[1] https://github.com/uclouvain/openjpeg/issues/1231

Please adjust the affected versions in the BTS as needed.


More information about the Pkg-phototools-devel mailing list