openjpeg-1.3-9.AXS4

エラータID: AXSA:2012-984:02

Release date: 
Tuesday, December 11, 2012 - 21:05
Subject: 
openjpeg-1.3-9.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, the new still-image compression standard from the Joint Photographic Experts Group (JPEG).

Security issues fixed with this release:

• CVE-2012-3535
Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.

Solution: 

Update packages.

CVEs: 
CVE-2012-3535
Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted JPEG2000 file.
Additional Info: 

N/A

Download: 

SRPMS
  1. openjpeg-1.3-9.AXS4.src.rpm
    MD5: 3b4c8c7a77f50342e40ae853bf87c30a
    SHA-256: 47d192669f1db610fbc5e46aacb695e747dcc06bd915e617e596e60a97d5238c
    Size: 0.98 MB

Asianux Server 4 for x86
  1. openjpeg-libs-1.3-9.AXS4.i686.rpm
    MD5: 996f63b614063a0fdbe7db94c9d40829
    SHA-256: c419dd362ad258d9fb13d5e3ca7da6fde3090a1a6a9e381fc34e76e38b138a87
    Size: 58.29 kB

Asianux Server 4 for x86_64
  1. openjpeg-libs-1.3-9.AXS4.x86_64.rpm
    MD5: 6a86bd78e58619916600227daa3fecee
    SHA-256: 5f251a492849b02a5d4daa3b2b17080bd79b9feeeb2fe118d7d78bb69b9c8d3e
    Size: 58.00 kB
  2. openjpeg-libs-1.3-9.AXS4.i686.rpm
    MD5: 996f63b614063a0fdbe7db94c9d40829
    SHA-256: c419dd362ad258d9fb13d5e3ca7da6fde3090a1a6a9e381fc34e76e38b138a87
    Size: 58.29 kB