Bug 835767 (CVE-2012-3358)
Summary: | CVE-2012-3358 openjpeg: heap-based buffer overflow when processing JPEG2000 image files | ||||||
---|---|---|---|---|---|---|---|
Product: | [Other] Security Response | Reporter: | Huzaifa S. Sidhpurwala <huzaifas> | ||||
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> | ||||
Status: | CLOSED ERRATA | QA Contact: | |||||
Severity: | high | Docs Contact: | |||||
Priority: | high | ||||||
Version: | unspecified | CC: | jlieskov, security-response-team, tgl | ||||
Target Milestone: | --- | Keywords: | Security | ||||
Target Release: | --- | ||||||
Hardware: | All | ||||||
OS: | Linux | ||||||
Whiteboard: | |||||||
Fixed In Version: | Doc Type: | Bug Fix | |||||
Doc Text: | Story Points: | --- | |||||
Clone Of: | Environment: | ||||||
Last Closed: | 2012-07-11 17:03:30 UTC | Type: | --- | ||||
Regression: | --- | Mount Type: | --- | ||||
Documentation: | --- | CRM: | |||||
Verified Versions: | Category: | --- | |||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
Cloudforms Team: | --- | Target Upstream Version: | |||||
Embargoed: | |||||||
Bug Depends On: | 812319, 831561, 831562, 839125 | ||||||
Bug Blocks: | 812327 | ||||||
Attachments: |
|
Description
Huzaifa S. Sidhpurwala
2012-06-27 04:51:26 UTC
Created attachment 594684 [details]
openjpeg-tile-sanity.patch
Um, this is the relevant patch, not that one.
This is now public: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681075 Here is the upstream commit: http://code.google.com/p/openjpeg/source/detail?r=1727 Created openjpeg tracking bugs for this issue Affects: fedora-all [bug 839125] This issue has been addressed in following products: Red Hat Enterprise Linux 6 Via RHSA-2012:1068 https://rhn.redhat.com/errata/RHSA-2012-1068.html |