[IT-SecNots] [SECURITY] [DSA 3665-1] openjpeg2 security update

[Moritz Muehlenhoff <jmm AT debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3665-1                   security AT debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
September 11, 2016                    https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : openjpeg2
CVE ID         : CVE-2015-6581 CVE-2015-8871 CVE-2016-1924 CVE-2016-7163

Multiple vulnerabilities in OpenJPEG, a JPEG 2000 image compression /
decompression library, may result in denial of service or the execution
of arbitrary code if a malformed JPEG 2000 file is processed.

For the stable distribution (jessie), these problems have been fixed in
version 2.1.0-2+deb8u1.

We recommend that you upgrade your openjpeg2 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=RsSN
-----END PGP SIGNATURE-----