OESA-2021-1327
- Source
- https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1327
- Import Source
- https://repo.openeuler.org/security/data/osv/OESA-2021-1327.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/OESA-2021-1327
- Upstream
- Published
- 2021-08-28T11:03:10Z
- Modified
- 2025-08-12T05:06:33.388204Z
- Summary
- leptonica security update
- Details
-
The library supports many operations that are useful on * Document images * Natural images Fundamental image processing and image analysis operations * Rasterop (aka bitblt) * Affine transforms (scaling, translation, rotation, shear) on images of arbitrary pixel depth * Projective and bi-linear transforms * Binary and gray scale morphology, rank order filters, and convolution * Seed-fill and connected components * Image transformations with changes in pixel depth, both at the same scale and with scale change * Pixelwise masking, blending, enhancement, arithmetic ops, etc.
Security Fix(es):
Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.(CVE-2020-36277)
Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c.(CVE-2020-36278)
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixFewColorsOctcubeQuantMixed in colorquant1.c.(CVE-2020-36281)
Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c.(CVE-2020-36279)
Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c.(CVE-2020-36280)
- Database specific
{ "severity": "High" }- References
-
- https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1327
- https://nvd.nist.gov/vuln/detail/CVE-2020-36277
- https://nvd.nist.gov/vuln/detail/CVE-2020-36278
- https://nvd.nist.gov/vuln/detail/CVE-2020-36281
- https://nvd.nist.gov/vuln/detail/CVE-2020-36279
- https://nvd.nist.gov/vuln/detail/CVE-2020-36280
Affected packages
openEuler:20.03-LTS-SP2 / leptonica
Package
- Name
- leptonica
- Purl
- pkg:rpm/openEuler/leptonica&distro=openEuler-20.03-LTS-SP2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.79.0-2.oe1
Ecosystem specific
{
"aarch64": [
"leptonica-debugsource-1.79.0-2.oe1.aarch64.rpm",
"leptonica-devel-1.79.0-2.oe1.aarch64.rpm",
"leptonica-1.79.0-2.oe1.aarch64.rpm",
"leptonica-tools-1.79.0-2.oe1.aarch64.rpm",
"leptonica-debuginfo-1.79.0-2.oe1.aarch64.rpm"
],
"src": [
"leptonica-1.79.0-2.oe1.src.rpm"
],
"x86_64": [
"leptonica-debuginfo-1.79.0-2.oe1.x86_64.rpm",
"leptonica-1.79.0-2.oe1.x86_64.rpm",
"leptonica-debugsource-1.79.0-2.oe1.x86_64.rpm",
"leptonica-devel-1.79.0-2.oe1.x86_64.rpm",
"leptonica-tools-1.79.0-2.oe1.x86_64.rpm"
]
}