Bug 1299767 (CVE-2016-1923)
Summary: | CVE-2016-1923 openjpeg: out of bounds read in opj_j2k_update_image_data | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | Andrej Nemec <anemec> |
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
Status: | CLOSED NOTABUG | QA Contact: | |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | unspecified | CC: | erik-fedora, extras-orphan, hobbes1069, jaromir.capik, manisandro, oliver, phracek, rdieter, slawomir |
Target Milestone: | --- | Keywords: | Reopened, Security |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2016-09-21 00:28:22 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 1299768, 1299769, 1299770, 1299771, 1377769, 1377770, 1377771, 1377772 | ||
Bug Blocks: | 1299764 |
Description
Andrej Nemec
2016-01-19 09:26:31 UTC
Created openjpeg tracking bugs for this issue: Affects: fedora-all [bug 1299768] Affects: epel-6 [bug 1299770] Affects: epel-7 [bug 1299771] Created mingw-openjpeg tracking bugs for this issue: Affects: fedora-all [bug 1299769] The functions affected by the vulnerability do not exist in openjpeg 1.x, so this is actually NOTABUG. What is the correct way to close this bug and dependent bugs? marking it (and dependents) as CLOSED->NOTABUG (with explanation, of course) should suffice Closing since this vulnerability does not affect openjpeg 1.x (the affected functions to not exist in openjpeg 1.x). > What is the correct way to close this bug and dependent bugs? > marking it (and dependents) as CLOSED->NOTABUG (with explanation, of course) > should suffice Thank you for checking it! But it would be better if you just close the bugs filed against Fedora/EPEL (as a maintainer) and leave closing this (flaw)bug for Product Security. Thanks! Created mingw-openjpeg2 tracking bugs for this issue: Affects: fedora-all [bug 1377770] Created openjpeg2 tracking bugs for this issue: Affects: epel-all [bug 1377771] (In reply to Sandro Mani from comment #5) > Closing since this vulnerability does not affect openjpeg 1.x (the affected > functions to not exist in openjpeg 1.x). While that's true for openjpeg, we were missing openjpeg2 and mingw-openjpeg2 from the list of affected packages. Re-opening this flaw; tracking bugs for Fedora/EPEL have been filed. I am unable to reproduce the crash on current Fedora openjpeg, however discussion in the upstream patch talks about fixing integer overflow issues associated with use of opj_int_ceildiv. See also bug 1299772 (same upstream ticket) and bug 1374329 comment #14 which may be related. |