OpenJPEG2 Security Update
Summary
ALSA-2021:4251: Moderate: openjpeg2 security update. Affects openjpeg2 versions < 2.4.0-4.el8. Fixed in 2.4.0-4.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenJPEG2 is an open source library used for reading and writing image files in JPEG2000 format. It provides functionality for handling JPEG2000 images and is widely used in various applications and systems.
Vulnerability Detail
The OpenJPEG2 library is affected by multiple vulnerabilities, including use-after-free, double-free, heap-buffer-overflow, integer overflow, division-by-zero, null pointer dereference, and out-of-bounds read/write issues. These vulnerabilities can be exploited by an attacker to cause denial of service, execute arbitrary code, or read sensitive information.
How To Fix
Minimum fixed version
2.4.0-4.el8
This is the first release that contains the fix.
sudo dnf update openjpeg2Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no specific workarounds mentioned for these vulnerabilities.
Conclusion
OpenJPEG2 is affected by multiple vulnerabilities that can be mitigated by updating the library to the latest version. It is recommended to apply the necessary security updates to ensure the security and stability of systems using OpenJPEG2. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for openjpeg2 →
FAQ
OpenJPEG2 is an open source library for handling JPEG2000 image files.
The vulnerabilities in OpenJPEG2 include use-after-free, double-free, heap-buffer-overflow, integer overflow, division-by-zero, null pointer dereference, and out-of-bounds read/write issues.
These vulnerabilities can be exploited to cause denial of service, execute arbitrary code, or read sensitive information.
To fix these vulnerabilities, update the OpenJPEG2 library to version 2.4.0 or later.
No specific workarounds are mentioned for these vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for openjpeg2.
