Alpine/openjpeg: medium 6.5
jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a doub
Action: Upgrade openjpeg to 2.3.0-r6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.0-r6 | - |
Fixed versions
| 2.3.0-r6 |
Sources
- osv: ALPINE-CVE-2020-15389#Alpine:v3.9/openjpeg
- https://security.alpinelinux.org/vuln/CVE-2020-15389
published · modified · JSON