Your submission was sent successfully! Close

You have successfully unsubscribed! Close

USN-4497-1: OpenJPEG vulnerabilities

15 September 2020

Several security issues were fixed in OpenJPEG.

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Learn more about Ubuntu Pro

Releases

Packages

  • openjpeg2 - Open-source JPEG 2000 codec written in C language

Details

It was discovered that OpenJPEG incorrectly handled certain image files. A
remote attacker could possibly use this issue to cause a denial of service.
(CVE-2016-9112)

It was discovered that OpenJPEG did not properly handle certain input. If
OpenJPEG were supplied with specially crafted input, it could be made to crash
or potentially execute arbitrary code.
(CVE-2018-20847, CVE-2018-21010, CVE-2020-6851, CVE-2020-8112, CVE-2020-15389)

It was discovered that OpenJPEG incorrectly handled certain BMP files. A
remote attacker could possibly use this issue to cause a denial of service.
(CVE-2019-12973)

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Learn more about Ubuntu Pro

Related notices

  • USN-4782-1: libopenjpip7, libopenjp2-tools, libopenjpip-server, libopenjp2-7, libopenjp3d-tools, libopenjp3d7, libopenjpip-dec-server, libopenjp2-7-dev, libopenjpip-viewer, openjpeg2
  • USN-4686-1: ghostscript-x, libgs-dev, libgs9, libgs9-common, ghostscript, ghostscript-doc
  • USN-4685-1: libopenjpip7, libopenjp2-tools, libopenjpip-server, libopenjp2-7, libopenjp3d-tools, libopenjp3d7, libopenjpip-dec-server, libopenjp2-7-dev, libopenjpip-viewer, openjpeg2
  • USN-5664-1: libopenjpeg-dev, openjpeg, openjpip-server, libopenjpeg5, openjpip-viewer-xerces, openjpip-dec-server, openjpeg-tools, libopenjpeg-java, openjpip-viewer