| Name | TEMP-1153269-522F63 |
| Description | Heap buffer overlfow in opj_j2k_read_sod |
| Source | Automatically generated temporary name. Not for external reference. |
| Debian Bugs | 1153269 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| openjpeg2 (PTS) | bookworm, bookworm (security) | 2.5.0-2+deb12u3 | vulnerable |
| trixie (security), trixie | 2.5.3-2.1~deb13u2 | vulnerable |
| forky, sid | 2.5.4-1.1 | vulnerable |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|
| openjpeg2 | source | (unstable) | (unfixed) | | | 1153269 |
Notes
https://github.com/uclouvain/openjpeg/issues/1620
https://github.com/uclouvain/openjpeg/pull/1621
Fixed by: https://github.com/uclouvain/openjpeg/commit/91d08b11a72764f6d199f32fa0c1b1abd4edc2ad