Your submission was sent successfully! Close

You have successfully unsubscribed! Close

USN-4497-1: OpenJPEG vulnerabilities

15 September 2020

Several security issues were fixed in OpenJPEG.

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Learn more about Ubuntu Pro

Releases

Packages

  • openjpeg2 - Open-source JPEG 2000 codec written in C language

Details

It was discovered that OpenJPEG incorrectly handled certain image files. A
remote attacker could possibly use this issue to cause a denial of service.
(CVE-2016-9112)

It was discovered that OpenJPEG did not properly handle certain input. If
OpenJPEG were supplied with specially crafted input, it could be made to crash
or potentially execute arbitrary code.
(CVE-2018-20847, CVE-2018-21010, CVE-2020-6851, CVE-2020-8112, CVE-2020-15389)

It was discovered that OpenJPEG incorrectly handled certain BMP files. A
remote attacker could possibly use this issue to cause a denial of service.
(CVE-2019-12973)

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Learn more about Ubuntu Pro

Related notices

  • USN-4782-1: libopenjp3d-tools, libopenjp2-7, libopenjpip-dec-server, libopenjpip-server, libopenjpip-viewer, libopenjp2-tools, libopenjp3d7, libopenjpip7, openjpeg2, libopenjp2-7-dev
  • USN-4686-1: ghostscript-doc, ghostscript-x, ghostscript, libgs9-common, libgs-dev, libgs9
  • USN-5952-1: libopenjp3d-tools, libopenjp2-7, libopenjpip-dec-server, libopenjpip-server, libopenjpip-viewer, libopenjp2-tools, libopenjp3d7, libopenjpip7, openjpeg2, libopenjp2-7-dev
  • USN-4685-1: libopenjp3d-tools, libopenjp2-7, libopenjpip-dec-server, libopenjpip-server, libopenjpip-viewer, libopenjp2-tools, libopenjp3d7, libopenjpip7, openjpeg2, libopenjp2-7-dev
  • USN-5664-1: libopenjpeg-dev, openjpeg-tools, libopenjpeg-java, openjpip-server, openjpip-viewer-xerces, openjpeg, openjpip-dec-server, openjpip-viewer, libopenjpeg5