Format: 1.8 Date: Wed, 19 Feb 2020 09:52:00 -0500 Source: openjpeg2 Binary: libopenjp2-7 libopenjp2-7-dev libopenjp2-tools libopenjp3d-tools libopenjp3d7 libopenjpip-dec-server libopenjpip-server libopenjpip7 Architecture: s390x Version: 2.3.1-1ubuntu4 Distribution: focal-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libopenjp2-7 - JPEG 2000 image compression/decompression library libopenjp2-7-dev - development files for OpenJPEG, a JPEG 2000 image library libopenjp2-tools - command-line tools using the JPEG 2000 library libopenjp3d-tools - command-line tools using the JPEG 2000 - 3D library libopenjp3d7 - JP3D (JPEG 2000 / Part 10) image compression/decompression librar libopenjpip-dec-server - tool to allow caching of JPEG 2000 files using JPIP protocol libopenjpip-server - JPIP server for JPEG 2000 files libopenjpip7 - JPEG 2000 Interactive Protocol Changes: openjpeg2 (2.3.1-1ubuntu4) focal; urgency=medium . * SECURITY UPDATE: denial of service via excessive iteration - debian/patches/CVE-2019-12973-1.patch: detect invalid file dimensions early in src/bin/jp2/convertbmp.c. - debian/patches/CVE-2019-12973-2.patch: avoid potential infinite loop in src/bin/jp2/convertbmp.c. - CVE-2019-12973 * SECURITY UPDATE: heap overflow in opj_t1_clbl_decode_processor - debian/patches/CVE-2020-6851.patch: reject images whose coordinates are beyond INT_MAX in src/lib/openjp2/j2k.c. - CVE-2020-6851 * SECURITY UPDATE: another heap overflow in opj_t1_clbl_decode_processor - debian/patches/CVE-2020-8112.patch: avoid integer overflow in src/lib/openjp2/tcd.c. - CVE-2020-8112 Checksums-Sha1: 1401de9c5ec4dc97c61a36c7917f129e91394cd7 522724 libopenjp2-7-dbgsym_2.3.1-1ubuntu4_s390x.ddeb ad5b517500f0f03e3d030cc0c447fbb28570c846 26716 libopenjp2-7-dev_2.3.1-1ubuntu4_s390x.deb 7c2b5204f7893c24eb8d5caf217e8e9a3d56ea8d 134400 libopenjp2-7_2.3.1-1ubuntu4_s390x.deb 8f837947273e44b9d9c4310f7250c2c9cfa540ae 435448 libopenjp2-tools-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 08a37d3fb366fa5ec27422e742ed7d414a3f7ee7 80192 libopenjp2-tools_2.3.1-1ubuntu4_s390x.deb 12924aadad3fa025bbe5806b903a9c07c8a10de0 73228 libopenjp3d-tools-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 48057cd3717df5801ff98c2e2a776a4ea54c1e0f 27732 libopenjp3d-tools_2.3.1-1ubuntu4_s390x.deb 06e4e2cf40e1fce48500227cdaf0a9ce15fc4bc1 209136 libopenjp3d7-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 3cd515517e41c20dc7639e23ffab4174831a7866 71368 libopenjp3d7_2.3.1-1ubuntu4_s390x.deb 2704e02b25ab27ed234a651e35376e220d3eda02 22260 libopenjpip-dec-server-dbgsym_2.3.1-1ubuntu4_s390x.ddeb b1cbd52f540d1c4e36d30be3758e3e743011dafe 15312 libopenjpip-dec-server_2.3.1-1ubuntu4_s390x.deb 151f06badbf13f15ff3ffbe153667f24bce8791e 114452 libopenjpip-server-dbgsym_2.3.1-1ubuntu4_s390x.ddeb c58afc9e84dac62fae98d229129ea11d758b07a4 37732 libopenjpip-server_2.3.1-1ubuntu4_s390x.deb 79c3576209e7b04661c3435e26aec06c91f19757 163580 libopenjpip7-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 87b35c0c2affa94679cbee1c357c5ff028130412 45028 libopenjpip7_2.3.1-1ubuntu4_s390x.deb 5bff9806eee768b9fda3fd1da7ab22387f7af4ac 11672 openjpeg2_2.3.1-1ubuntu4_s390x.buildinfo Checksums-Sha256: a02508075a91771af02e55194381d28094387520805c99b62fca0c84c32f563f 522724 libopenjp2-7-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 92ba8823a503e225cd577dc9d72061b5bd9f8e9ce1adb46473b4d5b9b11e60fb 26716 libopenjp2-7-dev_2.3.1-1ubuntu4_s390x.deb 4c57af38dc583a4d94c1c617cef51af062199f12f7073e0520533898f6890d92 134400 libopenjp2-7_2.3.1-1ubuntu4_s390x.deb 69e6302a425c891b668417341cd984f48984ba4aaadd924174e46acb8dfec589 435448 libopenjp2-tools-dbgsym_2.3.1-1ubuntu4_s390x.ddeb db110891fd4c56d5cd166084e99be181be3061332b4c56ccebc41175e63af361 80192 libopenjp2-tools_2.3.1-1ubuntu4_s390x.deb bffdd93fafa65359232dc2818106837b0e3282a90a72828d6449f3d514dbea90 73228 libopenjp3d-tools-dbgsym_2.3.1-1ubuntu4_s390x.ddeb a4279548895b89b556d8d0dcfca0a8ce0ed331f8ffdbb523b09ffccda3ee48c7 27732 libopenjp3d-tools_2.3.1-1ubuntu4_s390x.deb a8f3d8795de423aea1ec7bdda655d442bb0d194bbde5399a99cbe8437a258a14 209136 libopenjp3d7-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 6caca398e30be49a21d741d4af1be755f37e3608878d9e3ae766300ceda61b44 71368 libopenjp3d7_2.3.1-1ubuntu4_s390x.deb f3176a0db950e0535747f0e90dec95bb3203ecda9c05caa500cd1b83e9fa2523 22260 libopenjpip-dec-server-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 99534c22a74b7f61df848f53bbc64971db1da43180bff94e35eb5474d5abbf9b 15312 libopenjpip-dec-server_2.3.1-1ubuntu4_s390x.deb 74f47f851a7fe239a3c1c4dd79cd6b0240632417dd46574e5f36ad15e3f54d16 114452 libopenjpip-server-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 29951a3712bbaf35316f9493622aec24c61647b6dead0a4f70e543d36373eaf9 37732 libopenjpip-server_2.3.1-1ubuntu4_s390x.deb 68e15c1efe4bba4a0d88c180d44d3b6c322e0c3f46b6aa5a0f352aa78a6a81d0 163580 libopenjpip7-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 37c95f95b2cba5db56994a54d2e75bd34ffe78c7f4dfe832c2d494a885f08f7e 45028 libopenjpip7_2.3.1-1ubuntu4_s390x.deb d64eb6e99aaf9ca0a8530f7bb72cbcdb6d5d72ae36fe7ff13e3fafe2841ffc52 11672 openjpeg2_2.3.1-1ubuntu4_s390x.buildinfo Files: 621fe8c3665fbf94c67463c87c3bc5dc 522724 debug optional libopenjp2-7-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 1e8ed9acbab96a44964adc59eb5472ae 26716 libdevel optional libopenjp2-7-dev_2.3.1-1ubuntu4_s390x.deb 7cca310c1880919dcc4b4b8b71dcde0a 134400 libs optional libopenjp2-7_2.3.1-1ubuntu4_s390x.deb b7766d62aa580420817b7012f48d7fef 435448 debug optional libopenjp2-tools-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 3980a601e97b448f03cac627cbd7261c 80192 graphics optional libopenjp2-tools_2.3.1-1ubuntu4_s390x.deb 980746427eb0da0af18818b40d8c750b 73228 debug optional libopenjp3d-tools-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 858d46a3984341695b4db525f1cfabc4 27732 graphics optional libopenjp3d-tools_2.3.1-1ubuntu4_s390x.deb bbccc406f088f987e36bd8e39a9c590e 209136 debug optional libopenjp3d7-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 7003469b51ad61d5f3e3e3ea43871175 71368 libs optional libopenjp3d7_2.3.1-1ubuntu4_s390x.deb 6309420c5a86322089b25110c56bf130 22260 debug optional libopenjpip-dec-server-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 3c32ee99b0bcbb11a22f909de88c931a 15312 graphics optional libopenjpip-dec-server_2.3.1-1ubuntu4_s390x.deb ef3673ebad8bb502969463eec9d98a0b 114452 debug optional libopenjpip-server-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 10225dc0a1ac51f169fbcde4c498b005 37732 graphics optional libopenjpip-server_2.3.1-1ubuntu4_s390x.deb 9a5d1a9e18e3749d8d8a63ea1f05889f 163580 debug optional libopenjpip7-dbgsym_2.3.1-1ubuntu4_s390x.ddeb 747d281cba2f398c7a26f0551449a266 45028 libs optional libopenjpip7_2.3.1-1ubuntu4_s390x.deb be03592aa1fe68415b426037ee5cf686 11672 libs optional openjpeg2_2.3.1-1ubuntu4_s390x.buildinfo Original-Maintainer: Debian PhotoTools Maintainers