MGASA-2017-0299

Updated openjpeg2 packages fix security vulnerabilities

No scoreFix available

Patches from upstream have been added to fix two heap-based buffer overflows and a memory allocation failure.

What each source reports

OSV No score

Updated openjpeg2 packages fix security vulnerabilities

Patches from upstream have been added to fix two heap-based buffer overflows and a memory allocation failure.

Record: MGASA-2017-0299
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`openjpeg2` Mageia:5	before 2.2.0-1.1.mga5	2.2.0-1.1.mga5
`openjpeg2` Mageia:6	before 2.2.0-1.1.mga6	2.2.0-1.1.mga6

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

MGASA-2017-0299 is a vulnerability with no CVSS score yet in openjpeg2, published August 24, 2017. No source lists public exploit code. Fixed in openjpeg2 2.2.0-1.1.mga5.

References

advisories.mageia.org/MGASA-2017-0299.html
bugs.mageia.org/show_bug.cgi?id=21572
blogs.gentoo.org/ago/2017/08/16/openjpeg-heap-based-buffer-overflow-in-opj_write_bytes_le-cio-c
blogs.gentoo.org/ago/2017/08/14/openjpeg-memory-allocation-failure-in-opj_aligned_alloc_n-opj_malloc-c
blogs.gentoo.org/ago/2017/08/16/openjpeg-heap-based-buffer-overflow-in-opj_mqc_flush-mqc-c