[CLSA-2026:1787149537] openjpeg2: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-08-19 14:51:12 UTC
Description:
- CVE-2025-50952: fix NULL pointer dereference in opj_dwt_decode_tile() - CVE-2023-39327: fix uncontrolled resource consumption when EPH markers are declared but missing
CVEs fixed:
Updated packages:
  • openjpeg2-2.4.0-8.el9.tuxcare.els1.i686.rpm
    sha:3b6d6b0982234f6a2431b167ed69d2f91b070af8cb1eb5014c179bb9b6339f5a
  • openjpeg2-2.4.0-8.el9.tuxcare.els1.x86_64.rpm
    sha:e2e5ff97e6e0f2bf8b44aa2b0507155b23f357086a44ba6c48e94b6cd56c0617
  • openjpeg2-devel-2.4.0-8.el9.tuxcare.els1.i686.rpm
    sha:06f4b572e8256c710de5358df5aea89e4a170bc55684fbdb3494deeb9a681cb9
  • openjpeg2-devel-2.4.0-8.el9.tuxcare.els1.x86_64.rpm
    sha:60dc499e55b034383cb57c62e32299ac025c83c37fbf039643dbb5af72226c6b
  • openjpeg2-devel-docs-2.4.0-8.el9.tuxcare.els1.noarch.rpm
    sha:105b686626982d57f6c9b8630fb9af31d017e43d3e923f78d8d1799cb6376dc8
  • openjpeg2-tools-2.4.0-8.el9.tuxcare.els1.i686.rpm
    sha:00ec17288969982d4e4414cf092fec7a610034fc965d4d3191f4135716de2fad
  • openjpeg2-tools-2.4.0-8.el9.tuxcare.els1.x86_64.rpm
    sha:a53fe0c167977ca00f91cbf32ddf9f16be2c915ed32c15d91622b559caefcc5b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.