Debian DLA-1851-1 : openjpeg2 security update
Medium Nessus Plugin ID 126607
SynopsisThe remote Debian host is missing a security update.
DescriptionTwo security vulnerabilities were discovered in openjpeg2, a JPEG 2000 image library.
A floating point exception or divide by zero in the function opj_pi_next_cprl may lead to a denial of service.
An improper computation of values in the function opj_get_encoding_parameters can lead to an integer overflow. This issue was partly fixed by the patch for CVE-2015-1239.
For Debian 8 'Jessie', these problems have been fixed in version 2.1.0-2+deb8u7.
We recommend that you upgrade your openjpeg2 packages.
NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
SolutionUpgrade the affected packages.