Security update for openjpeg2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:3801-1 Final 1 1 2022-10-27T14:24:21Z current 2022-10-27T14:24:21Z 2022-10-27T14:24:21Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openjpeg2 This update for openjpeg2 fixes the following issues: - CVE-2018-21010: Fixed heap buffer overflow in color_apply_icc_profile in bin/common/color.c (bsc#1149789). - CVE-2020-27824: Fixed OOB read in opj_dwt_calc_explicit_stepsizes() (bsc#1179821). - CVE-2020-27842: Fixed null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (bsc#1180043). - CVE-2020-27843: Fixed out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (bsc#1180044). - CVE-2020-27845: Fixed heap-based buffer over-read in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (bsc#1180046). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-3801,SUSE-OpenStack-Cloud-9-2022-3801,SUSE-OpenStack-Cloud-Crowbar-9-2022-3801,SUSE-SLE-SAP-12-SP4-2022-3801,SUSE-SLE-SERVER-12-SP2-BCL-2022-3801,SUSE-SLE-SERVER-12-SP3-BCL-2022-3801,SUSE-SLE-SERVER-12-SP4-LTSS-2022-3801,SUSE-SLE-SERVER-12-SP5-2022-3801 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20223801-1/ Link for SUSE-SU-2022:3801-1 https://lists.suse.com/pipermail/sle-security-updates/2022-October/012730.html E-Mail link for SUSE-SU-2022:3801-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1149789 SUSE Bug 1149789 https://bugzilla.suse.com/1179821 SUSE Bug 1179821 https://bugzilla.suse.com/1180043 SUSE Bug 1180043 https://bugzilla.suse.com/1180044 SUSE Bug 1180044 https://bugzilla.suse.com/1180046 SUSE Bug 1180046 https://www.suse.com/security/cve/CVE-2018-21010/ SUSE CVE CVE-2018-21010 page https://www.suse.com/security/cve/CVE-2020-27824/ SUSE CVE CVE-2020-27824 page https://www.suse.com/security/cve/CVE-2020-27842/ SUSE CVE CVE-2020-27842 page https://www.suse.com/security/cve/CVE-2020-27843/ SUSE CVE CVE-2020-27843 page https://www.suse.com/security/cve/CVE-2020-27845/ SUSE CVE CVE-2020-27845 page SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 libopenjp2-7-2.1.0-4.18.2 libopenjp2-7-32bit-2.1.0-4.18.2 libopenjp2-7-64bit-2.1.0-4.18.2 openjpeg2-2.1.0-4.18.2 openjpeg2-devel-2.1.0-4.18.2 libopenjp2-7-2.1.0-4.18.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libopenjp2-7-2.1.0-4.18.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libopenjp2-7-2.1.0-4.18.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libopenjp2-7-2.1.0-4.18.2 as a component of SUSE Linux Enterprise Server 12 SP5 libopenjp2-7-2.1.0-4.18.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libopenjp2-7-2.1.0-4.18.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libopenjp2-7-2.1.0-4.18.2 as a component of SUSE OpenStack Cloud 9 libopenjp2-7-2.1.0-4.18.2 as a component of SUSE OpenStack Cloud Crowbar 9 OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c. CVE-2018-21010 SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.18.2 SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.18.2 SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.18.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223801-1/ https://www.suse.com/security/cve/CVE-2018-21010.html CVE-2018-21010 https://bugzilla.suse.com/1149789 SUSE Bug 1149789 A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability. CVE-2020-27824 SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.18.2 SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.18.2 SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.18.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223801-1/ https://www.suse.com/security/cve/CVE-2020-27824.html CVE-2020-27824 https://bugzilla.suse.com/1179821 SUSE Bug 1179821 There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability. CVE-2020-27842 SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.18.2 SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.18.2 SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.18.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223801-1/ https://www.suse.com/security/cve/CVE-2020-27842.html CVE-2020-27842 https://bugzilla.suse.com/1180043 SUSE Bug 1180043 A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability. CVE-2020-27843 SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.18.2 SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.18.2 SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.18.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223801-1/ https://www.suse.com/security/cve/CVE-2020-27843.html CVE-2020-27843 https://bugzilla.suse.com/1180044 SUSE Bug 1180044 There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability. CVE-2020-27845 SUSE Linux Enterprise Server 12 SP2-BCL:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP3-BCL:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server 12 SP5:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenjp2-7-2.1.0-4.18.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libopenjp2-7-2.1.0-4.18.2 SUSE OpenStack Cloud 9:libopenjp2-7-2.1.0-4.18.2 SUSE OpenStack Cloud Crowbar 9:libopenjp2-7-2.1.0-4.18.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223801-1/ https://www.suse.com/security/cve/CVE-2020-27845.html CVE-2020-27845 https://bugzilla.suse.com/1180046 SUSE Bug 1180046