ELSA-2017-0559

ELSA-2017-0559 - openjpeg security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2017-03-19

Description

[1.3-16]
- Revert previous changes in patch for CVE-2016-5159
- Fix double free in patch for CVE-2016-5139
- Fix memory leaks and invalid read in cio_bytein
Related: #1419775

[1.3-15]
- Add two more allocation checks to patch for CVE-2016-5159
Related: #1419775

[1.3-14]
- Add patches for CVE-2016-5139, CVE-2016-5158, CVE-2016-5159
Related: #1419775

[1.3-13]
- Fix patch name: CVE-2016-9675 => CVE-2016-7163
Related: #1419775

[1.3-12]
- Add patch for CVE-2016-9675
- Fix Coverity issues
Resolves: #1419775

Related CVEs

CVE-2016-5139

CVE-2016-5158

CVE-2016-9675

CVE-2016-5159

CVE-2016-7163

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	openjpeg-1.3-16.el6_8.src.rpm	dfd9a41c9ada22021b92e5b5854d9950	-
	openjpeg-1.3-16.el6_8.i686.rpm	ce145c06d5cbc2aae98e297df0ccce21	-
	openjpeg-devel-1.3-16.el6_8.i686.rpm	59cf7e84060a365a61a6272bff76115c	-
	openjpeg-libs-1.3-16.el6_8.i686.rpm	1ab1bee26b7d493d62337dbc6da5c46c	-
Oracle Linux 6 (x86_64)	openjpeg-1.3-16.el6_8.src.rpm	dfd9a41c9ada22021b92e5b5854d9950	-
	openjpeg-1.3-16.el6_8.x86_64.rpm	58a91b119565c7b38b9f823cc5db8521	-
	openjpeg-devel-1.3-16.el6_8.i686.rpm	59cf7e84060a365a61a6272bff76115c	-
	openjpeg-devel-1.3-16.el6_8.x86_64.rpm	0220d0313540d10bd882a69952e2e448	-
	openjpeg-libs-1.3-16.el6_8.i686.rpm	1ab1bee26b7d493d62337dbc6da5c46c	-
	openjpeg-libs-1.3-16.el6_8.x86_64.rpm	2b2f63c191e73d893b5fb609760fa4f7	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team