tocsin

Alpine/openjpeg: high 7.5

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.

Action: Upgrade openjpeg to 2.3.1-r3 or later.

Affected

introducedfixedlast affected
02.3.1-r3-

Fixed versions

2.3.1-r3

Sources

published · modified · JSON