diff options
author | wiz <wiz> | 2012-07-11 09:07:21 +0000 |
---|---|---|
committer | wiz <wiz> | 2012-07-11 09:07:21 +0000 |
commit | 4220e54460da14fd147c5f506a3179350654efc1 (patch) | |
tree | 21b78223271b84d50cbfb594ff9fe3923302ec11 /graphics/openjpeg/DESCR | |
parent | 10bbd31ec99d8d8e228d0624fe8a87880019f785 (diff) | |
download | pkgsrc-4220e54460da14fd147c5f506a3179350654efc1.tar.gz |
CVE-2012-3358:
A heap-based buffer overflow was found in the way OpenJPEG, an
open-source JPEG 2000 codec written in C language, performed parsing of
JPEG2000 having certain number of tiles and tilesizes. A remote
attacker could provide a specially crafted JPEG 2000 file, which when
opened in an application linked against openjpeg would lead to that
application crash, or, potentially arbitrary code execution with the
privileges of the user running the application.
http://code.google.com/p/openjpeg/source/detail?r=1727
Bump PKGREVISION.
pkglint cleanups while here.
Diffstat (limited to 'graphics/openjpeg/DESCR')
-rw-r--r-- | graphics/openjpeg/DESCR | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/graphics/openjpeg/DESCR b/graphics/openjpeg/DESCR index 16500ce608f..e62fa18e2e1 100644 --- a/graphics/openjpeg/DESCR +++ b/graphics/openjpeg/DESCR @@ -1,3 +1,3 @@ The OpenJPEG library is an open-source JPEG 2000 codec written in C. It has been developed in order to promote the use of JPEG 2000 and is -licensed under a BSD license.
\ No newline at end of file +licensed under a BSD license. |