ELSA-2017-0559

ELSA-2017-0559 - openjpeg security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2017-03-19

Description

[1.3-16]
- Revert previous changes in patch for CVE-2016-5159
- Fix double free in patch for CVE-2016-5139
- Fix memory leaks and invalid read in cio_bytein
Related: #1419775

[1.3-15]
- Add two more allocation checks to patch for CVE-2016-5159
Related: #1419775

[1.3-14]
- Add patches for CVE-2016-5139, CVE-2016-5158, CVE-2016-5159
Related: #1419775

[1.3-13]
- Fix patch name: CVE-2016-9675 => CVE-2016-7163
Related: #1419775

[1.3-12]
- Add patch for CVE-2016-9675
- Fix Coverity issues
Resolves: #1419775

Related CVEs

CVE-2016-5159

CVE-2016-7163

CVE-2016-9675

CVE-2016-5139

CVE-2016-5158

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	openjpeg-1.3-16.el6_8.src.rpm	8d3ebf1f40604db4bf33b80d4a83389fb9fa4dc212b4e402a32cd226e9846154	-	ol6_i386_latest
	openjpeg-1.3-16.el6_8.src.rpm	8d3ebf1f40604db4bf33b80d4a83389fb9fa4dc212b4e402a32cd226e9846154	-	ol6_i386_latest_archive
	openjpeg-1.3-16.el6_8.src.rpm	8d3ebf1f40604db4bf33b80d4a83389fb9fa4dc212b4e402a32cd226e9846154	-	ol6_u10_i386_base
	openjpeg-1.3-16.el6_8.src.rpm	8d3ebf1f40604db4bf33b80d4a83389fb9fa4dc212b4e402a32cd226e9846154	-	ol6_u8_i386_patch
	openjpeg-1.3-16.el6_8.i686.rpm	e7341ab4891a6da8e5a9ebc1621170c79eca0cbb1482b1d49199a2c19c2a8610	-	ol6_i386_latest
	openjpeg-1.3-16.el6_8.i686.rpm	e7341ab4891a6da8e5a9ebc1621170c79eca0cbb1482b1d49199a2c19c2a8610	-	ol6_i386_latest_archive
	openjpeg-1.3-16.el6_8.i686.rpm	e7341ab4891a6da8e5a9ebc1621170c79eca0cbb1482b1d49199a2c19c2a8610	-	ol6_u10_i386_base
	openjpeg-1.3-16.el6_8.i686.rpm	e7341ab4891a6da8e5a9ebc1621170c79eca0cbb1482b1d49199a2c19c2a8610	-	ol6_u8_i386_patch
	openjpeg-devel-1.3-16.el6_8.i686.rpm	7b667c13875dbaed44bcfc699b6e68167e0f51d5dd2ad059be0e8842d0b814fd	-	ol6_i386_latest
	openjpeg-devel-1.3-16.el6_8.i686.rpm	7b667c13875dbaed44bcfc699b6e68167e0f51d5dd2ad059be0e8842d0b814fd	-	ol6_i386_latest_archive
	openjpeg-devel-1.3-16.el6_8.i686.rpm	7b667c13875dbaed44bcfc699b6e68167e0f51d5dd2ad059be0e8842d0b814fd	-	ol6_u10_i386_base
	openjpeg-devel-1.3-16.el6_8.i686.rpm	7b667c13875dbaed44bcfc699b6e68167e0f51d5dd2ad059be0e8842d0b814fd	-	ol6_u8_i386_patch
	openjpeg-libs-1.3-16.el6_8.i686.rpm	92bee68061cbc70c65735f85008960411e301abbc763d79f1b6e5e47b8a5b18f	-	ol6_i386_latest
	openjpeg-libs-1.3-16.el6_8.i686.rpm	92bee68061cbc70c65735f85008960411e301abbc763d79f1b6e5e47b8a5b18f	-	ol6_i386_latest_archive
	openjpeg-libs-1.3-16.el6_8.i686.rpm	92bee68061cbc70c65735f85008960411e301abbc763d79f1b6e5e47b8a5b18f	-	ol6_u10_i386_base
	openjpeg-libs-1.3-16.el6_8.i686.rpm	92bee68061cbc70c65735f85008960411e301abbc763d79f1b6e5e47b8a5b18f	-	ol6_u8_i386_patch
Oracle Linux 6 (x86_64)	openjpeg-1.3-16.el6_8.src.rpm	8d3ebf1f40604db4bf33b80d4a83389fb9fa4dc212b4e402a32cd226e9846154	-	ol6_u10_x86_64_base
	openjpeg-1.3-16.el6_8.src.rpm	8d3ebf1f40604db4bf33b80d4a83389fb9fa4dc212b4e402a32cd226e9846154	-	ol6_u8_x86_64_patch
	openjpeg-1.3-16.el6_8.src.rpm	8d3ebf1f40604db4bf33b80d4a83389fb9fa4dc212b4e402a32cd226e9846154	-	ol6_x86_64_latest
	openjpeg-1.3-16.el6_8.src.rpm	8d3ebf1f40604db4bf33b80d4a83389fb9fa4dc212b4e402a32cd226e9846154	-	ol6_x86_64_latest_archive
	openjpeg-1.3-16.el6_8.x86_64.rpm	a0a01c583b8d30b4740afc021fc9273edd473cc0bae731e8d811ec89318305e6	-	ol6_u10_x86_64_base
	openjpeg-1.3-16.el6_8.x86_64.rpm	a0a01c583b8d30b4740afc021fc9273edd473cc0bae731e8d811ec89318305e6	-	ol6_u8_x86_64_patch
	openjpeg-1.3-16.el6_8.x86_64.rpm	a0a01c583b8d30b4740afc021fc9273edd473cc0bae731e8d811ec89318305e6	-	ol6_x86_64_latest
	openjpeg-1.3-16.el6_8.x86_64.rpm	a0a01c583b8d30b4740afc021fc9273edd473cc0bae731e8d811ec89318305e6	-	ol6_x86_64_latest_archive
	openjpeg-devel-1.3-16.el6_8.i686.rpm	7b667c13875dbaed44bcfc699b6e68167e0f51d5dd2ad059be0e8842d0b814fd	-	ol6_u10_x86_64_base
	openjpeg-devel-1.3-16.el6_8.i686.rpm	7b667c13875dbaed44bcfc699b6e68167e0f51d5dd2ad059be0e8842d0b814fd	-	ol6_u8_x86_64_patch
	openjpeg-devel-1.3-16.el6_8.i686.rpm	7b667c13875dbaed44bcfc699b6e68167e0f51d5dd2ad059be0e8842d0b814fd	-	ol6_x86_64_latest
	openjpeg-devel-1.3-16.el6_8.i686.rpm	7b667c13875dbaed44bcfc699b6e68167e0f51d5dd2ad059be0e8842d0b814fd	-	ol6_x86_64_latest_archive
	openjpeg-devel-1.3-16.el6_8.x86_64.rpm	f84206f2c382ab113bd039fa32473f7cddffa91df4ba960f2ef108af5db345cb	-	ol6_u10_x86_64_base
	openjpeg-devel-1.3-16.el6_8.x86_64.rpm	f84206f2c382ab113bd039fa32473f7cddffa91df4ba960f2ef108af5db345cb	-	ol6_u8_x86_64_patch
	openjpeg-devel-1.3-16.el6_8.x86_64.rpm	f84206f2c382ab113bd039fa32473f7cddffa91df4ba960f2ef108af5db345cb	-	ol6_x86_64_latest
	openjpeg-devel-1.3-16.el6_8.x86_64.rpm	f84206f2c382ab113bd039fa32473f7cddffa91df4ba960f2ef108af5db345cb	-	ol6_x86_64_latest_archive
	openjpeg-libs-1.3-16.el6_8.i686.rpm	92bee68061cbc70c65735f85008960411e301abbc763d79f1b6e5e47b8a5b18f	-	ol6_u10_x86_64_base
	openjpeg-libs-1.3-16.el6_8.i686.rpm	92bee68061cbc70c65735f85008960411e301abbc763d79f1b6e5e47b8a5b18f	-	ol6_u8_x86_64_patch
	openjpeg-libs-1.3-16.el6_8.i686.rpm	92bee68061cbc70c65735f85008960411e301abbc763d79f1b6e5e47b8a5b18f	-	ol6_x86_64_latest
	openjpeg-libs-1.3-16.el6_8.i686.rpm	92bee68061cbc70c65735f85008960411e301abbc763d79f1b6e5e47b8a5b18f	-	ol6_x86_64_latest_archive
	openjpeg-libs-1.3-16.el6_8.x86_64.rpm	d374d3afaebe94c5762e6174643f931fd873cfe778dc9f685099705a411d2b97	-	ol6_u10_x86_64_base
	openjpeg-libs-1.3-16.el6_8.x86_64.rpm	d374d3afaebe94c5762e6174643f931fd873cfe778dc9f685099705a411d2b97	-	ol6_u8_x86_64_patch
	openjpeg-libs-1.3-16.el6_8.x86_64.rpm	d374d3afaebe94c5762e6174643f931fd873cfe778dc9f685099705a411d2b97	-	ol6_x86_64_latest
	openjpeg-libs-1.3-16.el6_8.x86_64.rpm	d374d3afaebe94c5762e6174643f931fd873cfe778dc9f685099705a411d2b97	-	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team