tocsin

Debian/openjpeg2: medium 6.5

jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a doub

Action: Upgrade openjpeg2 to 2.4.0-1 or later.

Affected

introducedfixedlast affected
02.4.0-1-

Fixed versions

2.4.0-1

Sources

published · modified · JSON