All ProjectsArch LinuxAUR web interfaceCommunity PackagesPacmanRelease Engineering Switch

Show Task #

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

Tasklist

FS#68906 - [openjpeg2] [Security] arbitrary code execution (CVE-2020-27823)

Task Type Bug Report Category Security Status Closed Assigned To Andreas Radke (AndyRTR) Levente Polyak (anthraxx) Architecture All Severity Medium Priority Normal Reported Version Due in Version Undecided Due Date Undecided Percent Complete Votes 0 Private No

Details Summary ======= The package openjpeg2 is vulnerable to arbitrary code execution via CVE-2020-27823. Guidance ======== Applying the commit referenced below fixes the issue. References ========== https://security.archlinux.org/AVG-1339 https://github.com/uclouvain/openjpeg/issues/1284 https://github.com/uclouvain/openjpeg/commit/b2072402b7e14d22bba6fb8cde2a1e9996e9a919