<br/>
<h1>Changelog from Git</h1><br/><br/>
<div class='changelog'>
-<pre class='wrap'>commit 67ec360f48aeded95d06578e717bdf40a8e6d16f
+<pre class='wrap'>commit eaa098b59b346cb88e4d10d505061f669d7134fc
+Author: Even Rouault <even.rouault@spatialys.com>
+Date: 2020-11-23 13:49:05 +0100
+
+ Encoder: grow buffer size in opj_tcd_code_block_enc_allocate_data() to avoid write heap buffer overflow in opj_mqc_flush (fixes #1283)
+
+commit 67ec360f48aeded95d06578e717bdf40a8e6d16f
Author: Even Rouault <even.rouault@spatialys.com>
Date: 2020-11-23 13:38:27 +0100
convertbmp: detect invalid file dimensions early (CVE-2018-6616)
-commit 8ee335227bbcaf1614124046aa25e53d67b11ec3
-Author: Hugo Lefeuvre <hle@debian.org>
-Date: 2018-12-14 04:58:40 +0100
-
- convertbmp: detect invalid file dimensions early
-
- width/length dimensions read from bmp headers are not necessarily
- valid. For instance they may have been maliciously set to very large
- values with the intention to cause DoS (large memory allocation, stack
- overflow). In these cases we want to detect the invalid size as early
- as possible.
-
- This commit introduces a counter which verifies that the number of
- written bytes corresponds to the advertized width/length.
-
- Fixes #1059 (CVE-2018-6616).
-
...</pre></div>
</body>
'2.2.0' => '2017-08-10 00:31',
'2.3.0' => '2017-10-04 22:23',
'2.3.1' => '2019-04-02 10:08',
- 'current' => '2020-11-23 13:38:27'
+ 'current' => '2020-11-23 13:49:05'
},
'HeadersDiff' => {
'1.1' => {
'Maintainer' => 'OpenJPEG team',
'MaintainerUrl' => 'http://www.openjpeg.org/',
'PackageDiff' => {},
- 'ScmUpdateTime' => '1606142296',
+ 'ScmUpdateTime' => '1606150095',
'Soname' => {
'1.1' => {
'lib/libopenjpeg.so' => 'libopenjpeg.so'
<th>Headers<br/>Diff</th>
</tr>
<tr id='current'><td>current</td>
-<td>2020-11-23<br/>13:38</td>
+<td>2020-11-23<br/>13:49</td>
<td>7</td>
<td><a href='../../changelog/openjpeg/current/log.html'>changelog</a></td>
<td class='ok'><a href='../../objects_report/openjpeg/2.3.1/current/report.html'>100%</a></td>
<td>N/A</td>
<td>N/A</td>
</tr>
-</table><br/>Maintained by <a href='http://www.openjpeg.org/'>OpenJPEG team</a>. Last updated on Mon Nov 23 14:38:54 2020.<br/>
+</table><br/>Maintained by <a href='http://www.openjpeg.org/'>OpenJPEG team</a>. Last updated on Mon Nov 23 16:48:52 2020.<br/>
<br/>
<hr/>
<div align='right'><a class='home' title="Andrey Ponomarenko's ABI laboratory" href='http://abi-laboratory.pro/'>abi-laboratory.pro</a></div>