ELSA-2021-4251

ELSA-2021-4251 - openjpeg2 security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2021-11-16

Description

[2.4.0-4]
- Fix Covscan defect

[2.4.0-3]
- Fix CVE-2021-3575 (#1969279)
- Fix resource leak identified by Covscan

[2.4.0-2]
- Fix CVE-2021-29338 (#1951332)

[2.4.0-1]
- Rebase to 2.4.0
- Resolves: CVE-2018-5727 (#1538467)
- Resolves: CVE-2018-5785 (#1538556)
- Resolves: CVE-2018-20845 (#1730679)
- Resolves: CVE-2018-20847 (#1734337)
- Resolves: CVE-2019-12973 (#1739076)
- Resolves: CVE-2020-15389 (#1855115)
- Resolves: CVE-2020-27814 (#1908965)
- Resolves: CVE-2020-27823 (#1906222)
- Resolves: CVE-2020-27824 (#1906216)
- Resolves: CVE-2020-27842 (#1908165)
- Resolves: CVE-2020-27843 (#1908164)
- Resolves: CVE-2020-27845 (#1908168)

Related CVEs

CVE-2018-5727

CVE-2020-27823

CVE-2020-27814

CVE-2018-20845

CVE-2019-12973

CVE-2020-27824

CVE-2020-27842

CVE-2020-15389

CVE-2021-29338

CVE-2020-27843

CVE-2021-3575

CVE-2018-20847

CVE-2020-27845

CVE-2018-5785

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	openjpeg2-2.4.0-4.el8.src.rpm	3812e8a1d653699d062543419190d6eaf4369cb45526b91333263e0431b2b632	-	ol8_aarch64_appstream
	openjpeg2-2.4.0-4.el8.src.rpm	3812e8a1d653699d062543419190d6eaf4369cb45526b91333263e0431b2b632	-	ol8_aarch64_codeready_builder
	openjpeg2-2.4.0-4.el8.aarch64.rpm	f2cc3bec73b981c319f91bccdd73e32af381868f511c9893af3950acc62854b0	-	ol8_aarch64_appstream
	openjpeg2-devel-2.4.0-4.el8.aarch64.rpm	8f4c56736bf835b7c92d7644b3f9e5307497fd97b3ffa286a3d5a9a56225bdd9	-	ol8_aarch64_codeready_builder
	openjpeg2-devel-docs-2.4.0-4.el8.noarch.rpm	ad9c78a3c85a0075c03c32bd39d46cfdcb8285f7cb264683264adccffa1fac3c	-	ol8_aarch64_appstream
	openjpeg2-tools-2.4.0-4.el8.aarch64.rpm	00665603132cdacedc68009c6395355ce440871b722c788c8aab1ef4f1f5663e	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	openjpeg2-2.4.0-4.el8.src.rpm	3812e8a1d653699d062543419190d6eaf4369cb45526b91333263e0431b2b632	-	ol8_x86_64_appstream
	openjpeg2-2.4.0-4.el8.src.rpm	3812e8a1d653699d062543419190d6eaf4369cb45526b91333263e0431b2b632	-	ol8_x86_64_codeready_builder
	openjpeg2-2.4.0-4.el8.i686.rpm	159628e11c72a33a9b916659ad5d6f6d25fc4808f88da25d762654e2be761efe	-	ol8_x86_64_appstream
	openjpeg2-2.4.0-4.el8.x86_64.rpm	7cf814e5c0c13600a53e168b31f397ae760c639041ba7742b5bbbf3a48fc2e89	-	ol8_x86_64_appstream
	openjpeg2-devel-2.4.0-4.el8.i686.rpm	ed04d6712a03c0f3939f873dd594aa9f0a2621a67b551b05da1b05e517fa33f1	-	ol8_x86_64_codeready_builder
	openjpeg2-devel-2.4.0-4.el8.x86_64.rpm	04392997b5535c3be404730a264dc009d815d053e3fdb6b20276a13cd13810aa	-	ol8_x86_64_codeready_builder
	openjpeg2-devel-docs-2.4.0-4.el8.noarch.rpm	ad9c78a3c85a0075c03c32bd39d46cfdcb8285f7cb264683264adccffa1fac3c	-	ol8_x86_64_appstream
	openjpeg2-tools-2.4.0-4.el8.i686.rpm	22369f874a5f2e9885ca3fab9ff7a76486bd6183bb9fc2fa564e9ea4241c9097	-	ol8_x86_64_codeready_builder
	openjpeg2-tools-2.4.0-4.el8.x86_64.rpm	c748c2f140e75685255850610d00c9ca36066f7e3714d94243f3ee5ae6b1f233	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team