-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2013:110 http://www.mandriva.com/en/support/security/ _______________________________________________________________________ Package : openjpeg Date : April 10, 2013 Affected: Business Server 1.0 _______________________________________________________________________ Problem Description: Updated openjpeg packages fix security vulnerability: An out-of heap-based buffer bounds read and write flaw, leading to invalid free, was found in the way a tile coder / decoder (TCD) implementation of OpenJPEG, an open-source JPEG 2000 codec written in C language, performed releasing of previously allocated memory for the TCD encoder handle by processing certain Gray16 TIFF images. A remote attacker could provide a specially-crafted TIFF image file, which once converted into the JPEG 2000 file format with an application linked against OpenJPEG (such as 'image_to_j2k'), would lead to that application crash, or, potentially arbitrary code execution with the privileges of the user running the application (CVE-2009-5030). An input validation flaw, leading to a heap-based buffer overflow, was found in the way OpenJPEG handled the tile number and size in an image tile header. A remote attacker could provide a specially-crafted image file that, when decoded using an application linked against OpenJPEG, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application (CVE-2012-3358). It was found that OpenJPEG failed to sanity-check an image header field before using it. A remote attacker could provide a specially-crafted image file that could cause an application linked against OpenJPEG to crash or, possibly, execute arbitrary code (CVE-2012-3535). _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5030 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3358 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3535 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0152 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0166 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0274 _______________________________________________________________________ Updated Packages: Mandriva Business Server 1/X86_64: 59e2ca4e2d6eae2f1b6dfdc7b5bf7983 mbs1/x86_64/lib64openjpeg1-1.5.0-2.1.mbs1.x86_64.rpm 498834fe8ac2b8355402f0ded1470eda mbs1/x86_64/lib64openjpeg-devel-1.5.0-2.1.mbs1.x86_64.rpm 62fc2e8ee57f8c420254dc7cf12618ff mbs1/x86_64/openjpeg-1.5.0-2.1.mbs1.x86_64.rpm d0f2aa59be4a6abc5aca46a048735599 mbs1/SRPMS/openjpeg-1.5.0-2.1.mbs1.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZSmDmqjQ0CJFipgRAlEFAJ4xR4XMz2T5wCE7cK8PkA0uepJB4ACeLe6F LVoBTMKkC4aP4DWUpQqp/Qs= =PXwv -----END PGP SIGNATURE-----