Updated openjpeg2 packages fix security vulnerabilities
Publication date: 16 Jan 2025Modification date: 16 Jan 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-56826 , CVE-2024-56827
Description
Heap buffer overflow in bin/common/color.c. (CVE-2024-56826)
Heap buffer overflow in lib/openjp2/j2k.c. (CVE-2024-56827)
References
- https://bugs.mageia.org/show_bug.cgi?id=33905
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AWMGURRKWFOTMCKEBHYWF7HHDJSY7BTR/
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/XKBM37J7PMJ763EKO4IP3FLOLF4U26HW/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56826
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56827
SRPMS
9/core
- openjpeg2-2.5.0-1.2.mga9