FlawAtlas
Search the atlas
SUSE-SU-2022:4082-1 Not scored

Security update for openjpeg

This update for openjpeg fixes the following issues: - CVE-2018-20846: Fixed an Out-of-bounds accesses in pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi. (bsc#1140205) - CVE-2018-21010: Fixed a heap buffer overflow in color_apply_icc_profile in bin/common/color.c (bsc#1149789) - CVE-2020-27824: Fixed an OOB read in opj_dwt_calc_explicit_stepsizes() (bsc#1179821) - CVE-2020-27842: Fixed null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (bsc#1180043) - CVE-2020-27843: Fixed an out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (bsc#1180044) - CVE-2020-27845: Fixed a heap-based buffer over-read in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (bsc#1180046)

Exploit probability Not scored
Published November 18, 2022
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS openjpeg
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS openjpeg
SUSE:Linux Enterprise High Performance Computing 15-ESPOS openjpeg
SUSE:Linux Enterprise High Performance Computing 15-LTSS openjpeg
SUSE:Linux Enterprise Module for Desktop Applications 15 SP3 openjpeg
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4 openjpeg
SUSE:Linux Enterprise Server 15 SP1-BCL openjpeg
SUSE:Linux Enterprise Server 15 SP2-BCL openjpeg
SUSE:Linux Enterprise Server 15-LTSS openjpeg
SUSE:Linux Enterprise Server for SAP Applications 15 openjpeg
openSUSE:Leap 15.3 openjpeg
openSUSE:Leap 15.4 openjpeg

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2022:4082-1

This update for openjpeg fixes the following issues: - CVE-2018-20846: Fixed an Out-of-bounds accesses in pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi. (bsc#1140205) - CVE-2018-21010: Fixed a heap buffer overflow in color_apply_icc_profile in bin/common/color.c (bsc#1149789) - CVE-2020-27824: Fixed an OOB read in opj_dwt_calc_explicit_stepsizes() (bsc#1179821) - CVE-2020-27842: Fixed null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (bsc#1180043) - CVE-2020-27843: Fixed an out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (bsc#1180044) - CVE-2020-27845: Fixed a heap-based buffer over-read in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (bsc#1180046)

View original source

05 / REFERENCES

Further evidence