MGASA-2021-0093

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2021-0093.html

Import Source

https://advisories.mageia.org/MGASA-2021-0093.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2021-0093

Related

CVE-2020-27844

Published

2021-03-02T22:33:06Z

Modified

2021-03-02T21:40:34Z

Summary

Updated openjpeg2 packages fix security vulnerability

Details

A flaw was found in openjpeg's src/lib/openjp2/t2.c in versions prior to 2.4.0. This flaw allows an attacker to provide crafted input to openjpeg during conversion and encoding, causing an out-of-bounds write. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2020-27844).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:7 / openjpeg2

Package

Name: openjpeg2
Purl: pkg:rpm/mageia/openjpeg2?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.0-1.mga7

Ecosystem specific

{
    "section": "core"
}