tocsin

Alpine/openjpeg: high 7.5

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.

Action: Upgrade openjpeg to 2.3.0-r5 or later.

Affected

introducedfixedlast affected
02.3.0-r5-

Fixed versions

2.3.0-r5

Sources

published · modified · JSON