Security update for openjpeg2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:1252-1 Final 1 1 2022-04-19T06:51:22Z current 2022-04-19T06:51:22Z 2022-04-19T06:51:22Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openjpeg2 This update for openjpeg2 fixes the following issues: - CVE-2018-5727: Fixed integer overflow vulnerability in theopj_t1_encode_cblks function (bsc#1076314). - CVE-2018-5785: Fixed integer overflow caused by an out-of-bounds leftshift in the opj_j2k_setup_encoder function (bsc#1076967). - CVE-2018-6616: Fixed excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c (bsc#1079845). - CVE-2018-14423: Fixed division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl,and pi_next_rpcl in lib/openjp3d/pi.c (bsc#1102016). - CVE-2018-16375: Fixed missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c (bsc#1106882). - CVE-2018-16376: Fixed heap-based buffer overflow function t2_encode_packet in lib/openmj2/t2.c (bsc#1106881). - CVE-2018-20845: Fixed division-by-zero in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.ci (bsc#1140130). - CVE-2020-6851: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor (bsc#1160782). - CVE-2020-8112: Fixed heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c (bsc#1162090). - CVE-2020-15389: Fixed use-after-free if t a mix of valid and invalid files in a directory operated on by the decompressor (bsc#1173578). - CVE-2020-27823: Fixed heap buffer over-write in opj_tcd_dc_level_shift_encode() (bsc#1180457). - CVE-2021-29338: Fixed integer overflow that allows remote attackers to crash the application (bsc#1184774). - CVE-2022-1122: Fixed segmentation fault in opj2_decompress due to uninitialized pointer (bsc#1197738). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-1252,SUSE-SLE-Module-Basesystem-15-SP3-2022-1252,SUSE-SLE-Module-Basesystem-15-SP4-2022-1252,SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-1252,SUSE-SLE-Product-HPC-15-2022-1252,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-1252,SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-1252,SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1252,SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1252,SUSE-SLE-Product-RT-15-SP2-2022-1252,SUSE-SLE-Product-SLES-15-2022-1252,SUSE-SLE-Product-SLES-15-SP1-BCL-2022-1252,SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-1252,SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1252,SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1252,SUSE-SLE-Product-SLES_SAP-15-2022-1252,SUSE-SLE-Product-SLES_SAP-15-SP1-2022-1252,SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1252,SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1252,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1252,SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1252,SUSE-Storage-6-2022-1252,SUSE-Storage-7-2022-1252,openSUSE-SLE-15.3-2022-1252,openSUSE-SLE-15.4-2022-1252 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/ Link for SUSE-SU-2022:1252-1 https://lists.suse.com/pipermail/sle-security-updates/2022-April/010745.html E-Mail link for SUSE-SU-2022:1252-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1076314 SUSE Bug 1076314 https://bugzilla.suse.com/1076967 SUSE Bug 1076967 https://bugzilla.suse.com/1079845 SUSE Bug 1079845 https://bugzilla.suse.com/1102016 SUSE Bug 1102016 https://bugzilla.suse.com/1106881 SUSE Bug 1106881 https://bugzilla.suse.com/1106882 SUSE Bug 1106882 https://bugzilla.suse.com/1140130 SUSE Bug 1140130 https://bugzilla.suse.com/1160782 SUSE Bug 1160782 https://bugzilla.suse.com/1162090 SUSE Bug 1162090 https://bugzilla.suse.com/1173578 SUSE Bug 1173578 https://bugzilla.suse.com/1180457 SUSE Bug 1180457 https://bugzilla.suse.com/1184774 SUSE Bug 1184774 https://bugzilla.suse.com/1197738 SUSE Bug 1197738 https://www.suse.com/security/cve/CVE-2018-14423/ SUSE CVE CVE-2018-14423 page https://www.suse.com/security/cve/CVE-2018-16375/ SUSE CVE CVE-2018-16375 page https://www.suse.com/security/cve/CVE-2018-16376/ SUSE CVE CVE-2018-16376 page https://www.suse.com/security/cve/CVE-2018-20845/ SUSE CVE CVE-2018-20845 page https://www.suse.com/security/cve/CVE-2018-5727/ SUSE CVE CVE-2018-5727 page https://www.suse.com/security/cve/CVE-2018-5785/ SUSE CVE CVE-2018-5785 page https://www.suse.com/security/cve/CVE-2018-6616/ SUSE CVE CVE-2018-6616 page https://www.suse.com/security/cve/CVE-2020-15389/ SUSE CVE CVE-2020-15389 page https://www.suse.com/security/cve/CVE-2020-27823/ SUSE CVE CVE-2020-27823 page https://www.suse.com/security/cve/CVE-2020-6851/ SUSE CVE CVE-2020-6851 page https://www.suse.com/security/cve/CVE-2020-8112/ SUSE CVE CVE-2020-8112 page https://www.suse.com/security/cve/CVE-2021-29338/ SUSE CVE CVE-2021-29338 page https://www.suse.com/security/cve/CVE-2022-1122/ SUSE CVE CVE-2022-1122 page SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Package Hub 15 SP3 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-BCL SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 openSUSE Leap 15.3 libopenjp2-7-2.3.0-150000.3.5.1 libopenjp2-7-32bit-2.3.0-150000.3.5.1 libopenjp2-7-64bit-2.3.0-150000.3.5.1 openjpeg2-2.3.0-150000.3.5.1 openjpeg2-devel-2.3.0-150000.3.5.1 libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Enterprise Storage 6 openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Enterprise Storage 6 openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Enterprise Storage 6 libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Enterprise Storage 7 openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Enterprise Storage 7 openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Enterprise Storage 7 libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libopenjp2-7-32bit-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Real Time 15 SP2 openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Real Time 15 SP2 openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Real Time 15 SP2 libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15-LTSS openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15-LTSS openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server 15-LTSS libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Manager Proxy 4.1 openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Manager Proxy 4.1 openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Manager Proxy 4.1 libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Manager Retail Branch Server 4.1 openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Manager Retail Branch Server 4.1 openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Manager Retail Branch Server 4.1 libopenjp2-7-2.3.0-150000.3.5.1 as a component of SUSE Manager Server 4.1 openjpeg2-2.3.0-150000.3.5.1 as a component of SUSE Manager Server 4.1 openjpeg2-devel-2.3.0-150000.3.5.1 as a component of SUSE Manager Server 4.1 libopenjp2-7-2.3.0-150000.3.5.1 as a component of openSUSE Leap 15.3 libopenjp2-7-32bit-2.3.0-150000.3.5.1 as a component of openSUSE Leap 15.3 openjpeg2-2.3.0-150000.3.5.1 as a component of openSUSE Leap 15.3 openjpeg2-devel-2.3.0-150000.3.5.1 as a component of openSUSE Leap 15.3 Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash). CVE-2018-14423 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.5.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/ https://www.suse.com/security/cve/CVE-2018-14423.html CVE-2018-14423 https://bugzilla.suse.com/1102016 SUSE Bug 1102016 https://bugzilla.suse.com/1140130 SUSE Bug 1140130 An issue was discovered in OpenJPEG 2.3.0. Missing checks for header_info.height and header_info.width in the function pnmtoimage in bin/jpwl/convert.c can lead to a heap-based buffer overflow. CVE-2018-16375 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/ https://www.suse.com/security/cve/CVE-2018-16375.html CVE-2018-16375 https://bugzilla.suse.com/1106882 SUSE Bug 1106882 An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service or possibly unspecified other impact. CVE-2018-16376 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/ https://www.suse.com/security/cve/CVE-2018-16376.html CVE-2018-16376 https://bugzilla.suse.com/1106881 SUSE Bug 1106881 Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash). CVE-2018-20845 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.5.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/ https://www.suse.com/security/cve/CVE-2018-20845.html CVE-2018-20845 https://bugzilla.suse.com/1140130 SUSE Bug 1140130 In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. CVE-2018-5727 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/ https://www.suse.com/security/cve/CVE-2018-5727.html CVE-2018-5727 https://bugzilla.suse.com/1076314 SUSE Bug 1076314 In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder function (openjp2/j2k.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. CVE-2018-5785 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/ https://www.suse.com/security/cve/CVE-2018-5785.html CVE-2018-5785 https://bugzilla.suse.com/1076967 SUSE Bug 1076967 In OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. CVE-2018-6616 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/ https://www.suse.com/security/cve/CVE-2018-6616.html CVE-2018-6616 https://bugzilla.suse.com/1079845 SUSE Bug 1079845 https://bugzilla.suse.com/1140359 SUSE Bug 1140359 jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opj_image_destroy twice. CVE-2020-15389 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/ https://www.suse.com/security/cve/CVE-2020-15389.html CVE-2020-15389 https://bugzilla.suse.com/1173578 SUSE Bug 1173578 A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. CVE-2020-27823 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/ https://www.suse.com/security/cve/CVE-2020-27823.html CVE-2020-27823 https://bugzilla.suse.com/1180457 SUSE Bug 1180457 OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation. CVE-2020-6851 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/ https://www.suse.com/security/cve/CVE-2020-6851.html CVE-2020-6851 https://bugzilla.suse.com/1160782 SUSE Bug 1160782 https://bugzilla.suse.com/1162090 SUSE Bug 1162090 opj_t1_clbl_decode_processor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851. CVE-2020-8112 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/ https://www.suse.com/security/cve/CVE-2020-8112.html CVE-2020-8112 https://bugzilla.suse.com/1162090 SUSE Bug 1162090 Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files. CVE-2021-29338 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.5.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/ https://www.suse.com/security/cve/CVE-2021-29338.html CVE-2021-29338 https://bugzilla.suse.com/1184774 SUSE Bug 1184774 A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service. CVE-2022-1122 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.5.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Real Time 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.5.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.5.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.5.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.5.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.5.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20221252-1/ https://www.suse.com/security/cve/CVE-2022-1122.html CVE-2022-1122 https://bugzilla.suse.com/1197738 SUSE Bug 1197738