• [SECURITY] [DSA 3665-1] openjpeg2 security update

    From Moritz Muehlenhoff@1:229/2 to All on Sun Sep 11 20:10:01 2016
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-3665-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 11, 2016 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : openjpeg2
    CVE ID : CVE-2015-6581 CVE-2015-8871 CVE-2016-1924 CVE-2016-7163

    Multiple vulnerabilities in OpenJPEG, a JPEG 2000 image compression / decompression library, may result in denial of service or the execution
    of arbitrary code if a malformed JPEG 2000 file is processed.

    For the stable distribution (jessie), these problems have been fixed in
    version 2.1.0-2+deb8u1.

    We recommend that you upgrade your openjpeg2 packages.

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1

    iQIcBAEBAgAGBQJX1ZxgAAoJEBDCk7bDfE42H08P/RBV1MIK4lxzbCe75KQgpAyz OknBS3KM5tuRt7gNYDEB5YGypOHznjqqVcePH/VPKBxdL+UhRTArC8JACB0sfgLc GjEaODCSJi5mARU+/g2IwaAtJw34NffV3+DRiBex10hU8Y3H/gWxUUdw87wpmdBs vvaIVI7RWip43vfVncZ8uMCp9fW0zsy74nLM/rXhIeWz7yXQusOI8QM21Pn11JXu hOEJ2Lzegy1bWb5Uwzi9eoOVMpN6Ap7LtJw00m32OJqDt/TmEZa3O/MDM3qcueWz PPRrzKmn40HzquywCc5ZnMWQA8zkKsTDfmvN3eMcYuL/LQI47b0Uh7cSfg9dgHge pY+S8lupbp5B62VOi/+6WE5ltLSyhvILVZbWB+/SfGUvI8aYiPKTxYaRrkO/tHHe veg7usXAamhzhN2qjdQ6OE37RZ2El+Ii3YRyDc5ji2NJhJ8jkdsrAp4Ne9mooD3x 7Ay+tcxwY+VTpAwyVCedTAlkOj22rlqOApq/b7BqkqII00KYjgNx+cnxGs0jqHS6 6aRGdxcDMddB3yyza8rtmgSWsJSZbciiw8B26WELjPL6gz421roHDVBvWc6MxRsj F9Zr2PtUOJ2os5oVBqetPUlIs6SHQ0EgwJ62ZUbVQWZ2pXHB7Ad8x+/vgTmnxmac /3inXRoj53DFwgSA39hl
    =RsSN
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)