Security update for openjpeg2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:3802-1 Final 1 1 2022-10-27T14:27:02Z current 2022-10-27T14:27:02Z 2022-10-27T14:27:02Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openjpeg2 This update for openjpeg2 fixes the following issues: - CVE-2018-20846: Fixed OOB read in pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c (bsc#1140205). - CVE-2018-21010: Fixed heap buffer overflow in color_apply_icc_profile in bin/common/color.c (bsc#1149789). - CVE-2020-27814: Fixed heap buffer overflow in lib/openjp2/mqc.c (bsc#1179594), - CVE-2020-27824: Fixed OOB read in opj_dwt_calc_explicit_stepsizes() (bsc#1179821). - CVE-2020-27841: Fixed buffer over-read in lib/openjp2/pi.c (bsc#1180042). - CVE-2020-27842: Fixed null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (bsc#1180043). - CVE-2020-27843: Fixed OOB read in opj_t2_encode_packet function in openjp2/t2.c (bsc#1180044). - CVE-2020-27845: Fixed heap-based buffer over-read in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (bsc#1180046). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2022-3802,SUSE-SLE-Module-Basesystem-15-SP3-2022-3802,SUSE-SLE-Module-Basesystem-15-SP4-2022-3802,SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-3802,SUSE-SLE-Product-HPC-15-2022-3802,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2022-3802,SUSE-SLE-Product-HPC-15-SP1-LTSS-2022-3802,SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-3802,SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-3802,SUSE-SLE-Product-SLES-15-2022-3802,SUSE-SLE-Product-SLES-15-SP1-BCL-2022-3802,SUSE-SLE-Product-SLES-15-SP1-LTSS-2022-3802,SUSE-SLE-Product-SLES-15-SP2-BCL-2022-3802,SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-3802,SUSE-SLE-Product-SLES_SAP-15-2022-3802,SUSE-SLE-Product-SLES_SAP-15-SP1-2022-3802,SUSE-SLE-Product-SLES_SAP-15-SP2-2022-3802,SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-3802,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-3802,SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-3802,SUSE-Storage-6-2022-3802,SUSE-Storage-7-2022-3802,openSUSE-SLE-15.3-2022-3802,openSUSE-SLE-15.4-2022-3802 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20223802-1/ Link for SUSE-SU-2022:3802-1 https://lists.suse.com/pipermail/sle-security-updates/2022-October/012731.html E-Mail link for SUSE-SU-2022:3802-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1140205 SUSE Bug 1140205 https://bugzilla.suse.com/1149789 SUSE Bug 1149789 https://bugzilla.suse.com/1179594 SUSE Bug 1179594 https://bugzilla.suse.com/1179821 SUSE Bug 1179821 https://bugzilla.suse.com/1180042 SUSE Bug 1180042 https://bugzilla.suse.com/1180043 SUSE Bug 1180043 https://bugzilla.suse.com/1180044 SUSE Bug 1180044 https://bugzilla.suse.com/1180046 SUSE Bug 1180046 https://www.suse.com/security/cve/CVE-2018-20846/ SUSE CVE CVE-2018-20846 page https://www.suse.com/security/cve/CVE-2018-21010/ SUSE CVE CVE-2018-21010 page https://www.suse.com/security/cve/CVE-2020-27814/ SUSE CVE CVE-2020-27814 page https://www.suse.com/security/cve/CVE-2020-27824/ SUSE CVE CVE-2020-27824 page https://www.suse.com/security/cve/CVE-2020-27841/ SUSE CVE CVE-2020-27841 page https://www.suse.com/security/cve/CVE-2020-27842/ SUSE CVE CVE-2020-27842 page https://www.suse.com/security/cve/CVE-2020-27843/ SUSE CVE CVE-2020-27843 page https://www.suse.com/security/cve/CVE-2020-27845/ SUSE CVE CVE-2020-27845 page SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Package Hub 15 SP3 SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-BCL SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 openSUSE Leap 15.3 openSUSE Leap 15.4 libopenjp2-7-2.3.0-150000.3.8.1 libopenjp2-7-32bit-2.3.0-150000.3.8.1 libopenjp2-7-64bit-2.3.0-150000.3.8.1 openjpeg2-2.3.0-150000.3.8.1 openjpeg2-devel-2.3.0-150000.3.8.1 libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Enterprise Storage 6 libopenjp2-7-32bit-2.3.0-150000.3.8.1 as a component of SUSE Enterprise Storage 6 openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Enterprise Storage 6 openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Enterprise Storage 6 libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Enterprise Storage 7 openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Enterprise Storage 7 openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Enterprise Storage 7 libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libopenjp2-7-32bit-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libopenjp2-7-32bit-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libopenjp2-7-32bit-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libopenjp2-7-32bit-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libopenjp2-7-32bit-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15 SP2-BCL libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server 15-LTSS libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libopenjp2-7-32bit-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Manager Proxy 4.1 openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Manager Proxy 4.1 openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Manager Proxy 4.1 libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Manager Retail Branch Server 4.1 openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Manager Retail Branch Server 4.1 openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Manager Retail Branch Server 4.1 libopenjp2-7-2.3.0-150000.3.8.1 as a component of SUSE Manager Server 4.1 openjpeg2-2.3.0-150000.3.8.1 as a component of SUSE Manager Server 4.1 openjpeg2-devel-2.3.0-150000.3.8.1 as a component of SUSE Manager Server 4.1 libopenjp2-7-2.3.0-150000.3.8.1 as a component of openSUSE Leap 15.3 libopenjp2-7-32bit-2.3.0-150000.3.8.1 as a component of openSUSE Leap 15.3 openjpeg2-2.3.0-150000.3.8.1 as a component of openSUSE Leap 15.3 openjpeg2-devel-2.3.0-150000.3.8.1 as a component of openSUSE Leap 15.3 libopenjp2-7-2.3.0-150000.3.8.1 as a component of openSUSE Leap 15.4 libopenjp2-7-32bit-2.3.0-150000.3.8.1 as a component of openSUSE Leap 15.4 openjpeg2-2.3.0-150000.3.8.1 as a component of openSUSE Leap 15.4 openjpeg2-devel-2.3.0-150000.3.8.1 as a component of openSUSE Leap 15.4 Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash). CVE-2018-20846 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-devel-2.3.0-150000.3.8.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223802-1/ https://www.suse.com/security/cve/CVE-2018-20846.html CVE-2018-20846 https://bugzilla.suse.com/1140205 SUSE Bug 1140205 OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c. CVE-2018-21010 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-devel-2.3.0-150000.3.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223802-1/ https://www.suse.com/security/cve/CVE-2018-21010.html CVE-2018-21010 https://bugzilla.suse.com/1149789 SUSE Bug 1149789 A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application. CVE-2020-27814 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-devel-2.3.0-150000.3.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223802-1/ https://www.suse.com/security/cve/CVE-2020-27814.html CVE-2020-27814 https://bugzilla.suse.com/1179594 SUSE Bug 1179594 A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability. CVE-2020-27824 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-devel-2.3.0-150000.3.8.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223802-1/ https://www.suse.com/security/cve/CVE-2020-27824.html CVE-2020-27824 https://bugzilla.suse.com/1179821 SUSE Bug 1179821 There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability. CVE-2020-27841 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-devel-2.3.0-150000.3.8.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223802-1/ https://www.suse.com/security/cve/CVE-2020-27841.html CVE-2020-27841 https://bugzilla.suse.com/1180042 SUSE Bug 1180042 There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability. CVE-2020-27842 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-devel-2.3.0-150000.3.8.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223802-1/ https://www.suse.com/security/cve/CVE-2020-27842.html CVE-2020-27842 https://bugzilla.suse.com/1180043 SUSE Bug 1180043 A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability. CVE-2020-27843 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-devel-2.3.0-150000.3.8.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223802-1/ https://www.suse.com/security/cve/CVE-2020-27843.html CVE-2020-27843 https://bugzilla.suse.com/1180044 SUSE Bug 1180044 There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability. CVE-2020-27845 SUSE Enterprise Storage 6:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 6:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-2.3.0-150000.3.8.1 SUSE Enterprise Storage 7:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Module for Package Hub 15 SP3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-BCL:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server 15-LTSS:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libopenjp2-7-32bit-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP2:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-2.3.0-150000.3.8.1 SUSE Linux Enterprise Server for SAP Applications 15:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Proxy 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Retail Branch Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:libopenjp2-7-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-2.3.0-150000.3.8.1 SUSE Manager Server 4.1:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.3:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.3:openjpeg2-devel-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-2.3.0-150000.3.8.1 openSUSE Leap 15.4:libopenjp2-7-32bit-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-2.3.0-150000.3.8.1 openSUSE Leap 15.4:openjpeg2-devel-2.3.0-150000.3.8.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223802-1/ https://www.suse.com/security/cve/CVE-2020-27845.html CVE-2020-27845 https://bugzilla.suse.com/1180046 SUSE Bug 1180046