[CLSA-2026:1794011113] openjpeg: Fix of CVE-2021-3575
Type:
security
Severity:
Important
Release date:
2026-11-07 00:25:25 UTC
Description:
- CVE-2021-3575: fix heap buffer overflow in sYCC 4:2:0/4:2:2 to RGB conversion in j2k_to_image
CVEs fixed:
Updated packages:
  • openjpeg-1.5.1-18.el7.tuxcare.els1.i686.rpm
    sha:ac81d969742b0b3a9e075436ba456fe50db24a4ce01e445ff6a249362ffac701
  • openjpeg-1.5.1-18.el7.tuxcare.els1.x86_64.rpm
    sha:5bfe662440896861716671bb6fd8b31e04c20748e03054ea8e4dcae2ff1f9ee3
  • openjpeg-devel-1.5.1-18.el7.tuxcare.els1.i686.rpm
    sha:60aa1e6d448ced7e4b15f2b5419e2a6b0cecfb016afe0181f82b9d685a07061d
  • openjpeg-devel-1.5.1-18.el7.tuxcare.els1.x86_64.rpm
    sha:6757b7a04f11fac0317b827dc3197f3c9c66fbaf0fcaa2b6365b67a8df76936e
  • openjpeg-libs-1.5.1-18.el7.tuxcare.els1.i686.rpm
    sha:34f98ed879f9b8a41df478de2433d4a46b6a94c298aee62c2be4e13057f01cf0
  • openjpeg-libs-1.5.1-18.el7.tuxcare.els1.x86_64.rpm
    sha:54a63fb77557fbc8b59aabed1cdf373f4a4a8cc1fc47f602ec17a5588d5d4b2c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.