Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-6851

Fixed in a distro release EPSS 5%

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.

Published 2020-01-13 · CVE record · OSV

Products: uclouvain openjpeg, fedoraproject fedora, debian_linux, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, oracle georaster, oracle outside_in_technology

Distro releases

ReleasePackageFixed in
Alpine 3.10openjpeg2.3.1-r3
Alpine 3.11openjpeg2.3.1-r3
Alpine 3.12openjpeg2.3.1-r3
Alpine 3.13openjpeg2.3.1-r3
Alpine 3.14openjpeg2.3.1-r3
Alpine 3.15openjpeg2.3.1-r3
Alpine 3.16openjpeg2.3.1-r3
Alpine 3.17openjpeg2.3.1-r3
Alpine 3.18openjpeg2.3.1-r3
Alpine 3.19openjpeg2.3.1-r3
Alpine 3.20openjpeg2.3.1-r3
Alpine 3.21openjpeg2.3.1-r3
Alpine 3.22openjpeg2.3.1-r3
Alpine 3.23openjpeg2.3.1-r3
Alpine 3.24openjpeg2.3.1-r3
Alpine 3.8openjpeg2.3.0-r4
Alpine 3.9openjpeg2.3.0-r5
Arch Linuxopenjpeg22.4.0-1
Debian 10openjpeg22.3.0-2+deb10u2
Debian 12openjpeg22.4.0-1
Debian 13openjpeg22.4.0-1
Debian 14openjpeg22.4.0-1
Debian 8openjpeg22.1.0-2+deb8u9
Debian 9openjpeg22.1.2-1.1+deb9u5
Red Hat Enterprise Linux 7openjpeg20:2.3.1-2.el7_7
Red Hat Enterprise Linux 7openjpeg2-debuginfo0:2.3.1-2.el7_7
Red Hat Enterprise Linux 7openjpeg2-devel0:2.3.1-2.el7_7
Red Hat Enterprise Linux 7openjpeg2-devel-docs0:2.3.1-2.el7_7
Red Hat Enterprise Linux 7openjpeg2-tools0:2.3.1-2.el7_7
Red Hat Enterprise Linux 8openjpeg20:2.3.1-2.el8_1
Red Hat Enterprise Linux 8openjpeg2-debuginfo0:2.3.1-2.el8_1
Red Hat Enterprise Linux 8openjpeg2-debugsource0:2.3.1-2.el8_1
Red Hat Enterprise Linux 8openjpeg2-devel0:2.3.1-2.el8_1
Red Hat Enterprise Linux 8openjpeg2-devel-docs0:2.3.1-2.el8_1
Red Hat Enterprise Linux 8openjpeg2-tools0:2.3.1-2.el8_1
Red Hat Enterprise Linux 8openjpeg2-tools-debuginfo0:2.3.1-2.el8_1
Red Hat rhel e4s 8.0openjpeg20:2.3.0-9.el8_0
Red Hat rhel e4s 8.0openjpeg2-debuginfo0:2.3.0-9.el8_0
Red Hat rhel e4s 8.0openjpeg2-debugsource0:2.3.0-9.el8_0
Red Hat rhel e4s 8.0openjpeg2-devel-docs0:2.3.0-9.el8_0
Red Hat rhel e4s 8.0openjpeg2-tools0:2.3.0-9.el8_0
Red Hat rhel e4s 8.0openjpeg2-tools-debuginfo0:2.3.0-9.el8_0
SUSE Enterprise Storage 6openjpeg22.3.0-150000.3.5.1
SUSE Enterprise Storage 7openjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise High Performance Computing 15-ESPOSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise High Performance Computing 15-LTSSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP3openjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7libheif1.23.5-150700.3.24.1
SUSE Linux Enterprise Module for Package Hub 15 SP3openjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP7libheif1.23.5-150700.3.24.1
SUSE Linux Enterprise Real Time 15 SP2openjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server 15 SP1-BCLopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server 15 SP1-LTSSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server 15 SP2-BCLopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server 15 SP2-LTSSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server 15-LTSSopenjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server 16.0libheif1.23.5-160000.1.1
SUSE Linux Enterprise Server for SAP Applications 15openjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1openjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2openjpeg22.3.0-150000.3.5.1
SUSE Linux Enterprise Server for SAP applications 16.0libheif1.23.5-160000.1.1
SUSE Manager Proxy 4.1openjpeg22.3.0-150000.3.5.1
SUSE Manager Retail Branch Server 4.1openjpeg22.3.0-150000.3.5.1
SUSE Manager Server 4.1openjpeg22.3.0-150000.3.5.1
Ubuntu 16.04 LTSblenderno fix
Ubuntu 16.04 LTSghostscript9.26~dfsg+0-0ubuntu0.16.04.14
Ubuntu 16.04 LTSinsighttoolkit4no fix
Ubuntu 16.04 LTSopenjpeg22.1.2-1.1+deb9u5build0.16.04.1
Ubuntu 16.04 LTStexmakerno fix
Ubuntu 18.04 LTSblenderno fix
Ubuntu 18.04 LTSghostscript9.26~dfsg+0-0ubuntu0.18.04.14
Ubuntu 18.04 LTSinsighttoolkit4no fix
Ubuntu 18.04 LTSopenjpeg22.3.0-2+deb10u2build0.18.04.1
Ubuntu 20.04 LTSblenderno fix
Ubuntu 20.04 LTSinsighttoolkit4no fix
Ubuntu 20.04 LTSopenjpeg22.3.1-1ubuntu4
Ubuntu 22.04 LTSblenderno fix
Ubuntu 22.04 LTSinsighttoolkit4no fix
Ubuntu 24.04 LTSblenderno fix
Ubuntu 25.10blenderno fix
Ubuntu 25.10qtwebengine-opensource-srcno fix
Ubuntu 25.10texmakerno fix
Ubuntu 26.04 LTSblenderno fix
Ubuntu 26.04 LTStexmakerno fix
Ubuntu 26.10blenderno fix
Ubuntu 26.10qtwebengine-opensource-srcno fix
Ubuntu 26.10texmakerno fix
Ubuntu Pro 16.04 LTSopenjpeg22.1.2-1.1+deb9u6ubuntu0.1~esm3
Ubuntu Pro 18.04 LTSqtwebengine-opensource-srcno fix
Ubuntu Pro 18.04 LTStexmakerno fix
Ubuntu Pro 20.04 LTSqtwebengine-opensource-srcno fix
Ubuntu Pro 20.04 LTStexmakerno fix
Ubuntu Pro 22.04 LTSqtwebengine-opensource-srcno fix
Ubuntu Pro 22.04 LTStexmakerno fix
Ubuntu Pro 24.04 LTSqtwebengine-opensource-srcno fix
Ubuntu Pro 24.04 LTStexmakerno fix
Ubuntu Pro 26.04 LTSqtwebengine-opensource-srcno fix
openSUSE Leap 15.3openjpeg22.3.0-150000.3.5.1
openSUSE Leap 16.0libheif1.23.5-160000.1.1
openSUSE Tumbleweedlibheif1.23.5-1.1