csaf_redhat - rhsa-2021

rhsa-2021_4251

Vulnerability from csaf_redhat

Published

2021-11-09 17:42

Modified

2024-11-22 17:09

Summary

Red Hat Security Advisory: openjpeg2 security update

Notes

Topic

An update for openjpeg2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

OpenJPEG is an open source library for reading and writing image files in JPEG2000 format. The following packages have been upgraded to a later upstream version: openjpeg2 (2.4.0). Security Fix(es): * openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor (CVE-2020-15389) * openjpeg: heap-buffer-overflow in lib/openjp2/mqc.c could result in DoS (CVE-2020-27814) * openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode() (CVE-2020-27823) * openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution (CVE-2021-3575) * openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c (CVE-2018-5727) * openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c (CVE-2018-5785) * openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c (CVE-2018-20845) * openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c (CVE-2018-20847) * openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c (CVE-2019-12973) * openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes() (CVE-2020-27824) * openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (CVE-2020-27842) * openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (CVE-2020-27843) * openjpeg: heap-based buffer overflow in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (CVE-2020-27845) * openjpeg: out-of-bounds write due to an integer overflow in opj_compress.c (CVE-2021-29338) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "An update for openjpeg2 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
            title: "Topic",
         },
         {
            category: "general",
            text: "OpenJPEG is an open source library for reading and writing image files in JPEG2000 format.\n\nThe following packages have been upgraded to a later upstream version: openjpeg2 (2.4.0).\n\nSecurity Fix(es):\n\n* openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor (CVE-2020-15389)\n\n* openjpeg: heap-buffer-overflow in lib/openjp2/mqc.c could result in DoS (CVE-2020-27814)\n\n* openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode() (CVE-2020-27823)\n\n* openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution (CVE-2021-3575)\n\n* openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c (CVE-2018-5727)\n\n* openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c (CVE-2018-5785)\n\n* openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c (CVE-2018-20845)\n\n* openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c (CVE-2018-20847)\n\n* openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c (CVE-2019-12973)\n\n* openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes() (CVE-2020-27824)\n\n* openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (CVE-2020-27842)\n\n* openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (CVE-2020-27843)\n\n* openjpeg: heap-based buffer overflow in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (CVE-2020-27845)\n\n* openjpeg: out-of-bounds write due to an integer overflow in opj_compress.c (CVE-2021-29338)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2021:4251",
            url: "https://access.redhat.com/errata/RHSA-2021:4251",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#moderate",
            url: "https://access.redhat.com/security/updates/classification/#moderate",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/",
            url: "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/",
         },
         {
            category: "external",
            summary: "1536552",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1536552",
         },
         {
            category: "external",
            summary: "1537758",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1537758",
         },
         {
            category: "external",
            summary: "1728505",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1728505",
         },
         {
            category: "external",
            summary: "1728509",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1728509",
         },
         {
            category: "external",
            summary: "1732270",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1732270",
         },
         {
            category: "external",
            summary: "1852869",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1852869",
         },
         {
            category: "external",
            summary: "1901998",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1901998",
         },
         {
            category: "external",
            summary: "1905723",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1905723",
         },
         {
            category: "external",
            summary: "1905762",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1905762",
         },
         {
            category: "external",
            summary: "1907513",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907513",
         },
         {
            category: "external",
            summary: "1907516",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907516",
         },
         {
            category: "external",
            summary: "1907523",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907523",
         },
         {
            category: "external",
            summary: "1950101",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1950101",
         },
         {
            category: "external",
            summary: "1957616",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=1957616",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4251.json",
         },
      ],
      title: "Red Hat Security Advisory: openjpeg2 security update",
      tracking: {
         current_release_date: "2024-11-22T17:09:04+00:00",
         generator: {
            date: "2024-11-22T17:09:04+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.2.1",
            },
         },
         id: "RHSA-2021:4251",
         initial_release_date: "2021-11-09T17:42:07+00:00",
         revision_history: [
            {
               date: "2021-11-09T17:42:07+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2021-11-09T17:42:07+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2024-11-22T17:09:04+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux AppStream (v. 8)",
                        product: {
                           name: "Red Hat Enterprise Linux AppStream (v. 8)",
                           product_id: "AppStream-8.5.0.GA",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:enterprise_linux:8::appstream",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat CodeReady Linux Builder (v. 8)",
                        product: {
                           name: "Red Hat CodeReady Linux Builder (v. 8)",
                           product_id: "CRB-8.5.0.GA",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:enterprise_linux:8::crb",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat Enterprise Linux",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openjpeg2-0:2.4.0-4.el8.src",
                        product: {
                           name: "openjpeg2-0:2.4.0-4.el8.src",
                           product_id: "openjpeg2-0:2.4.0-4.el8.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2@2.4.0-4.el8?arch=src",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "src",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openjpeg2-0:2.4.0-4.el8.aarch64",
                        product: {
                           name: "openjpeg2-0:2.4.0-4.el8.aarch64",
                           product_id: "openjpeg2-0:2.4.0-4.el8.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2@2.4.0-4.el8?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                        product: {
                           name: "openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                           product_id: "openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-tools@2.4.0-4.el8?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                        product: {
                           name: "openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                           product_id: "openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-debugsource@2.4.0-4.el8?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                        product: {
                           name: "openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                           product_id: "openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-debuginfo@2.4.0-4.el8?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                        product: {
                           name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                           product_id: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-tools-debuginfo@2.4.0-4.el8?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                        product: {
                           name: "openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                           product_id: "openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-devel@2.4.0-4.el8?arch=aarch64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openjpeg2-0:2.4.0-4.el8.ppc64le",
                        product: {
                           name: "openjpeg2-0:2.4.0-4.el8.ppc64le",
                           product_id: "openjpeg2-0:2.4.0-4.el8.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2@2.4.0-4.el8?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                        product: {
                           name: "openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                           product_id: "openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-tools@2.4.0-4.el8?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                        product: {
                           name: "openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                           product_id: "openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-debugsource@2.4.0-4.el8?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                        product: {
                           name: "openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                           product_id: "openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-debuginfo@2.4.0-4.el8?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                        product: {
                           name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                           product_id: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-tools-debuginfo@2.4.0-4.el8?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                        product: {
                           name: "openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                           product_id: "openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-devel@2.4.0-4.el8?arch=ppc64le",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openjpeg2-0:2.4.0-4.el8.i686",
                        product: {
                           name: "openjpeg2-0:2.4.0-4.el8.i686",
                           product_id: "openjpeg2-0:2.4.0-4.el8.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2@2.4.0-4.el8?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                        product: {
                           name: "openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                           product_id: "openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-debugsource@2.4.0-4.el8?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                        product: {
                           name: "openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                           product_id: "openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-debuginfo@2.4.0-4.el8?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                        product: {
                           name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                           product_id: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-tools-debuginfo@2.4.0-4.el8?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-devel-0:2.4.0-4.el8.i686",
                        product: {
                           name: "openjpeg2-devel-0:2.4.0-4.el8.i686",
                           product_id: "openjpeg2-devel-0:2.4.0-4.el8.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-devel@2.4.0-4.el8?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-tools-0:2.4.0-4.el8.i686",
                        product: {
                           name: "openjpeg2-tools-0:2.4.0-4.el8.i686",
                           product_id: "openjpeg2-tools-0:2.4.0-4.el8.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-tools@2.4.0-4.el8?arch=i686",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i686",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openjpeg2-0:2.4.0-4.el8.x86_64",
                        product: {
                           name: "openjpeg2-0:2.4.0-4.el8.x86_64",
                           product_id: "openjpeg2-0:2.4.0-4.el8.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2@2.4.0-4.el8?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                        product: {
                           name: "openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                           product_id: "openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-tools@2.4.0-4.el8?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                        product: {
                           name: "openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                           product_id: "openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-debugsource@2.4.0-4.el8?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                        product: {
                           name: "openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                           product_id: "openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-debuginfo@2.4.0-4.el8?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                        product: {
                           name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                           product_id: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-tools-debuginfo@2.4.0-4.el8?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                        product: {
                           name: "openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                           product_id: "openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-devel@2.4.0-4.el8?arch=x86_64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openjpeg2-0:2.4.0-4.el8.s390x",
                        product: {
                           name: "openjpeg2-0:2.4.0-4.el8.s390x",
                           product_id: "openjpeg2-0:2.4.0-4.el8.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2@2.4.0-4.el8?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-tools-0:2.4.0-4.el8.s390x",
                        product: {
                           name: "openjpeg2-tools-0:2.4.0-4.el8.s390x",
                           product_id: "openjpeg2-tools-0:2.4.0-4.el8.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-tools@2.4.0-4.el8?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                        product: {
                           name: "openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                           product_id: "openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-debugsource@2.4.0-4.el8?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                        product: {
                           name: "openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                           product_id: "openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-debuginfo@2.4.0-4.el8?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                        product: {
                           name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                           product_id: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-tools-debuginfo@2.4.0-4.el8?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openjpeg2-devel-0:2.4.0-4.el8.s390x",
                        product: {
                           name: "openjpeg2-devel-0:2.4.0-4.el8.s390x",
                           product_id: "openjpeg2-devel-0:2.4.0-4.el8.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-devel@2.4.0-4.el8?arch=s390x",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                        product: {
                           name: "openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                           product_id: "openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openjpeg2-devel-docs@2.4.0-4.el8?arch=noarch",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-0:2.4.0-4.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
            },
            product_reference: "openjpeg2-0:2.4.0-4.el8.aarch64",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-0:2.4.0-4.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
            },
            product_reference: "openjpeg2-0:2.4.0-4.el8.i686",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-0:2.4.0-4.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
            },
            product_reference: "openjpeg2-0:2.4.0-4.el8.ppc64le",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-0:2.4.0-4.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
            },
            product_reference: "openjpeg2-0:2.4.0-4.el8.s390x",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-0:2.4.0-4.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
            },
            product_reference: "openjpeg2-0:2.4.0-4.el8.src",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-0:2.4.0-4.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
            },
            product_reference: "openjpeg2-0:2.4.0-4.el8.x86_64",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
            },
            product_reference: "openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debuginfo-0:2.4.0-4.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
            },
            product_reference: "openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
            },
            product_reference: "openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debuginfo-0:2.4.0-4.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
            },
            product_reference: "openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
            },
            product_reference: "openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debugsource-0:2.4.0-4.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
            },
            product_reference: "openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debugsource-0:2.4.0-4.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
            },
            product_reference: "openjpeg2-debugsource-0:2.4.0-4.el8.i686",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
            },
            product_reference: "openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debugsource-0:2.4.0-4.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
            },
            product_reference: "openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debugsource-0:2.4.0-4.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
            },
            product_reference: "openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-devel-0:2.4.0-4.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
            },
            product_reference: "openjpeg2-devel-0:2.4.0-4.el8.aarch64",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-devel-0:2.4.0-4.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
            },
            product_reference: "openjpeg2-devel-0:2.4.0-4.el8.i686",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-devel-0:2.4.0-4.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
            },
            product_reference: "openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-devel-0:2.4.0-4.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
            },
            product_reference: "openjpeg2-devel-0:2.4.0-4.el8.s390x",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-devel-0:2.4.0-4.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
            },
            product_reference: "openjpeg2-devel-0:2.4.0-4.el8.x86_64",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-devel-docs-0:2.4.0-4.el8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
            },
            product_reference: "openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-0:2.4.0-4.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
            },
            product_reference: "openjpeg2-tools-0:2.4.0-4.el8.aarch64",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-0:2.4.0-4.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
            },
            product_reference: "openjpeg2-tools-0:2.4.0-4.el8.i686",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-0:2.4.0-4.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
            },
            product_reference: "openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-0:2.4.0-4.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
            },
            product_reference: "openjpeg2-tools-0:2.4.0-4.el8.s390x",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-0:2.4.0-4.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
            },
            product_reference: "openjpeg2-tools-0:2.4.0-4.el8.x86_64",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
            },
            product_reference: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
            },
            product_reference: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
            },
            product_reference: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
            },
            product_reference: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
               product_id: "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            },
            product_reference: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            relates_to_product_reference: "AppStream-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-0:2.4.0-4.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
            },
            product_reference: "openjpeg2-0:2.4.0-4.el8.aarch64",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-0:2.4.0-4.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
            },
            product_reference: "openjpeg2-0:2.4.0-4.el8.i686",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-0:2.4.0-4.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
            },
            product_reference: "openjpeg2-0:2.4.0-4.el8.ppc64le",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-0:2.4.0-4.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
            },
            product_reference: "openjpeg2-0:2.4.0-4.el8.s390x",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-0:2.4.0-4.el8.src as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
            },
            product_reference: "openjpeg2-0:2.4.0-4.el8.src",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-0:2.4.0-4.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
            },
            product_reference: "openjpeg2-0:2.4.0-4.el8.x86_64",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
            },
            product_reference: "openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debuginfo-0:2.4.0-4.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
            },
            product_reference: "openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
            },
            product_reference: "openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debuginfo-0:2.4.0-4.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
            },
            product_reference: "openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
            },
            product_reference: "openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debugsource-0:2.4.0-4.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
            },
            product_reference: "openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debugsource-0:2.4.0-4.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
            },
            product_reference: "openjpeg2-debugsource-0:2.4.0-4.el8.i686",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
            },
            product_reference: "openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debugsource-0:2.4.0-4.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
            },
            product_reference: "openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-debugsource-0:2.4.0-4.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
            },
            product_reference: "openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-devel-0:2.4.0-4.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
            },
            product_reference: "openjpeg2-devel-0:2.4.0-4.el8.aarch64",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-devel-0:2.4.0-4.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
            },
            product_reference: "openjpeg2-devel-0:2.4.0-4.el8.i686",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-devel-0:2.4.0-4.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
            },
            product_reference: "openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-devel-0:2.4.0-4.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
            },
            product_reference: "openjpeg2-devel-0:2.4.0-4.el8.s390x",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-devel-0:2.4.0-4.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
            },
            product_reference: "openjpeg2-devel-0:2.4.0-4.el8.x86_64",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-devel-docs-0:2.4.0-4.el8.noarch as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
            },
            product_reference: "openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-0:2.4.0-4.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
            },
            product_reference: "openjpeg2-tools-0:2.4.0-4.el8.aarch64",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-0:2.4.0-4.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
            },
            product_reference: "openjpeg2-tools-0:2.4.0-4.el8.i686",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-0:2.4.0-4.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
            },
            product_reference: "openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-0:2.4.0-4.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
            },
            product_reference: "openjpeg2-tools-0:2.4.0-4.el8.s390x",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-0:2.4.0-4.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
            },
            product_reference: "openjpeg2-tools-0:2.4.0-4.el8.x86_64",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
            },
            product_reference: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
            },
            product_reference: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
            },
            product_reference: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
            },
            product_reference: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 8)",
               product_id: "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            },
            product_reference: "openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            relates_to_product_reference: "CRB-8.5.0.GA",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2018-5727",
         cwe: {
            id: "CWE-190",
            name: "Integer Overflow or Wraparound",
         },
         discovery_date: "2018-01-16T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1536552",
            },
         ],
         notes: [
            {
               category: "description",
               text: "In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2018-5727",
            },
            {
               category: "external",
               summary: "RHBZ#1536552",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1536552",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2018-5727",
               url: "https://www.cve.org/CVERecord?id=CVE-2018-5727",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-5727",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2018-5727",
            },
         ],
         release_date: "2018-01-13T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2021-11-09T17:42:07+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2021:4251",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c",
      },
      {
         cve: "CVE-2018-5785",
         cwe: {
            id: "CWE-190",
            name: "Integer Overflow or Wraparound",
         },
         discovery_date: "2018-01-19T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1537758",
            },
         ],
         notes: [
            {
               category: "description",
               text: "In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder function (openjp2/j2k.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2018-5785",
            },
            {
               category: "external",
               summary: "RHBZ#1537758",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1537758",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2018-5785",
               url: "https://www.cve.org/CVERecord?id=CVE-2018-5785",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-5785",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2018-5785",
            },
         ],
         release_date: "2018-01-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2021-11-09T17:42:07+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2021:4251",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "LOW",
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c",
      },
      {
         cve: "CVE-2018-20845",
         cwe: {
            id: "CWE-369",
            name: "Divide By Zero",
         },
         discovery_date: "2019-06-27T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1728505",
            },
         ],
         notes: [
            {
               category: "description",
               text: "Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2018-20845",
            },
            {
               category: "external",
               summary: "RHBZ#1728505",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1728505",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2018-20845",
               url: "https://www.cve.org/CVERecord?id=CVE-2018-20845",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-20845",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2018-20845",
            },
         ],
         release_date: "2019-06-26T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2021-11-09T17:42:07+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2021:4251",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c",
      },
      {
         cve: "CVE-2018-20847",
         cwe: {
            id: "CWE-190",
            name: "Integer Overflow or Wraparound",
         },
         discovery_date: "2019-06-27T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1728509",
            },
         ],
         notes: [
            {
               category: "description",
               text: "An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This issue did not affect the versions of openjpeg as shipped with Red Hat Enterprise Linux 7 as they did not include the vulnerable code, due to an older version of the tool being shipped.\nThis issue did not affect the versions of openjpeg2 as shipped with Red Hat Enterprise Linux 7 as they already contain the patched code.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2018-20847",
            },
            {
               category: "external",
               summary: "RHBZ#1728509",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1728509",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2018-20847",
               url: "https://www.cve.org/CVERecord?id=CVE-2018-20847",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2018-20847",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2018-20847",
            },
         ],
         release_date: "2019-06-26T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2021-11-09T17:42:07+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2021:4251",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "LOW",
                  baseScore: 4,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c",
      },
      {
         cve: "CVE-2019-12973",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         discovery_date: "2019-07-04T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1732270",
            },
         ],
         notes: [
            {
               category: "description",
               text: "In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2019-12973",
            },
            {
               category: "external",
               summary: "RHBZ#1732270",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1732270",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2019-12973",
               url: "https://www.cve.org/CVERecord?id=CVE-2019-12973",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2019-12973",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2019-12973",
            },
         ],
         release_date: "2019-06-26T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2021-11-09T17:42:07+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2021:4251",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "LOW",
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c",
      },
      {
         cve: "CVE-2020-15389",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         discovery_date: "2020-06-29T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1852869",
            },
         ],
         notes: [
            {
               category: "description",
               text: "jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opj_image_destroy twice.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-15389",
            },
            {
               category: "external",
               summary: "RHBZ#1852869",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1852869",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-15389",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-15389",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-15389",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-15389",
            },
         ],
         release_date: "2020-06-28T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2021-11-09T17:42:07+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2021:4251",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor",
      },
      {
         acknowledgments: [
            {
               names: [
                  "zodf0055980",
               ],
               organization: "SQLab NCTU Taiwan",
            },
         ],
         cve: "CVE-2020-27814",
         cwe: {
            id: "CWE-122",
            name: "Heap-based Buffer Overflow",
         },
         discovery_date: "2020-11-26T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1901998",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openjpeg: heap-buffer-overflow in lib/openjp2/mqc.c could result in DoS",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-27814",
            },
            {
               category: "external",
               summary: "RHBZ#1901998",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1901998",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-27814",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-27814",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-27814",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-27814",
            },
            {
               category: "external",
               summary: "https://github.com/uclouvain/openjpeg/issues/1283",
               url: "https://github.com/uclouvain/openjpeg/issues/1283",
            },
         ],
         release_date: "2020-11-23T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2021-11-09T17:42:07+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2021:4251",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "openjpeg: heap-buffer-overflow in lib/openjp2/mqc.c could result in DoS",
      },
      {
         acknowledgments: [
            {
               names: [
                  "zodf0055980",
               ],
               organization: "SQLab NCTU Taiwan",
            },
         ],
         cve: "CVE-2020-27823",
         cwe: {
            id: "CWE-787",
            name: "Out-of-bounds Write",
         },
         discovery_date: "2020-11-25T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1905762",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode()",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "Red Hat Product Security has rated this flaw with Moderate severity because it affects the encoder functionality specifically when performing an image conversion and not general reading of image files.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-27823",
            },
            {
               category: "external",
               summary: "RHBZ#1905762",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1905762",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-27823",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-27823",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-27823",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-27823",
            },
         ],
         release_date: "2020-11-25T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2021-11-09T17:42:07+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2021:4251",
            },
            {
               category: "workaround",
               details: "This flaw can be mitigated by not using openjpeg to convert untrusted image files.",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode()",
      },
      {
         acknowledgments: [
            {
               names: [
                  "zodf0055980",
               ],
               organization: "SQLab NCTU Taiwan",
            },
         ],
         cve: "CVE-2020-27824",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         discovery_date: "2020-11-25T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1905723",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes()",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-27824",
            },
            {
               category: "external",
               summary: "RHBZ#1905723",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1905723",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-27824",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-27824",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-27824",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-27824",
            },
         ],
         release_date: "2020-11-25T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2021-11-09T17:42:07+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2021:4251",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes()",
      },
      {
         acknowledgments: [
            {
               names: [
                  "zodf0055980",
               ],
               organization: "SQLab NCTU Taiwan",
            },
         ],
         cve: "CVE-2020-27842",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         discovery_date: "2020-12-09T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1907513",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in OpenJPEG’s t2 encoder. This flaw allows an attacker who can provide crafted input to be processed by OpenJPEG to cause a NULL pointer dereference issue. The highest threat to this vulnerability is to system availability.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-27842",
            },
            {
               category: "external",
               summary: "RHBZ#1907513",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907513",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-27842",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-27842",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-27842",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-27842",
            },
         ],
         release_date: "2020-12-01T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2021-11-09T17:42:07+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2021:4251",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c",
      },
      {
         acknowledgments: [
            {
               names: [
                  "zodf0055980",
               ],
               organization: "SQLab NCTU Taiwan",
            },
         ],
         cve: "CVE-2020-27843",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         discovery_date: "2020-12-09T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1907516",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in OpenJPEG. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-27843",
            },
            {
               category: "external",
               summary: "RHBZ#1907516",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907516",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-27843",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-27843",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-27843",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-27843",
            },
         ],
         release_date: "2020-12-02T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2021-11-09T17:42:07+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2021:4251",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c",
      },
      {
         acknowledgments: [
            {
               names: [
                  "zodf0055980",
               ],
               organization: "SQLab NCTU Taiwan",
            },
         ],
         cve: "CVE-2020-27845",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         discovery_date: "2020-12-09T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1907523",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in the src/lib/openjp2/pi.c function of OpenJPEG. This flaw allows an attacker who can provide untrusted input to OpenJPEG’s conversion/encoding functionality to cause an out-of-bounds read. The highest impact from this vulnerability is to system availability.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openjpeg: heap-based buffer overflow in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2020-27845",
            },
            {
               category: "external",
               summary: "RHBZ#1907523",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907523",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2020-27845",
               url: "https://www.cve.org/CVERecord?id=CVE-2020-27845",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2020-27845",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2020-27845",
            },
         ],
         release_date: "2020-12-02T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2021-11-09T17:42:07+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2021:4251",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openjpeg: heap-based buffer overflow in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c",
      },
      {
         cve: "CVE-2021-3575",
         cwe: {
            id: "CWE-787",
            name: "Out-of-bounds Write",
         },
         discovery_date: "2021-05-05T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1957616",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A heap-based buffer overflow was found in OpenJPEG. This flaw allows an attacker to execute arbitrary code with the permissions of the application compiled against OpenJPEG.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2021-3575",
            },
            {
               category: "external",
               summary: "RHBZ#1957616",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1957616",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2021-3575",
               url: "https://www.cve.org/CVERecord?id=CVE-2021-3575",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-3575",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2021-3575",
            },
         ],
         release_date: "2021-05-01T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2021-11-09T17:42:07+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2021:4251",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution",
      },
      {
         cve: "CVE-2021-29338",
         cwe: {
            id: "CWE-787",
            name: "Out-of-bounds Write",
         },
         discovery_date: "2021-04-14T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "1950101",
            },
         ],
         notes: [
            {
               category: "description",
               text: "There is a flaw in the opj2_compress program in openjpeg2. An attacker who is able to submit a large number of image files to be processed in a directory by opj2_compress, could trigger a heap out-of-bounds write due to an integer overflow, which is caused by the large number of image files. The greatest threat posed by this flaw is to confidentiality, integrity, and availability.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openjpeg: out-of-bounds write due to an integer overflow in opj_compress.c",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This flaw affects the opj2_compress utility but is not in the openjpeg2 library. Therefore, the attack vector is local to the opj2_compress utility and would require an attacker to convince a user to open a directory with an extremely large number of files using opj2_compress, or a script to be feeding such arbitrary, untrusted files to opj2_compress.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
               "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
               "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2021-29338",
            },
            {
               category: "external",
               summary: "RHBZ#1950101",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1950101",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2021-29338",
               url: "https://www.cve.org/CVERecord?id=CVE-2021-29338",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2021-29338",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2021-29338",
            },
         ],
         release_date: "2021-03-24T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2021-11-09T17:42:07+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2021:4251",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "AppStream-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "AppStream-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.src",
                  "CRB-8.5.0.GA:openjpeg2-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debuginfo-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-debugsource-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-devel-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-devel-docs-0:2.4.0-4.el8.noarch",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-0:2.4.0-4.el8.x86_64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.aarch64",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.i686",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.ppc64le",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.s390x",
                  "CRB-8.5.0.GA:openjpeg2-tools-debuginfo-0:2.4.0-4.el8.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openjpeg: out-of-bounds write due to an integer overflow in opj_compress.c",
      },
   ],
}

cve-2020-15389

Vulnerability from cvelistv5

Published

2020-06-29 20:30

Modified

2024-08-04 13:15

Severity ?

Summary

jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opj_image_destroy twice.

References

▼	URL	Tags
	https://github.com/uclouvain/openjpeg/issues/1261	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html	mailing-list, x_refsource_MLIST
	https://www.oracle.com/security-alerts/cpuoct2020.html	x_refsource_MISC
	https://pastebin.com/4sDKQ7U8	x_refsource_MISC
	https://security.gentoo.org/glsa/202101-29	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2021/dsa-4882	vendor-advisory, x_refsource_DEBIAN
	https://www.oracle.com//security-alerts/cpujul2021.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T13:15:20.562Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/uclouvain/openjpeg/issues/1261",
               },
               {
                  name: "[debian-lts-announce] 20200710 [SECURITY] [DLA 2277-1] openjpeg2 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://pastebin.com/4sDKQ7U8",
               },
               {
                  name: "GLSA-202101-29",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-29",
               },
               {
                  name: "DSA-4882",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-4882",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com//security-alerts/cpujul2021.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opj_image_destroy twice.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-07-20T22:54:22",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/uclouvain/openjpeg/issues/1261",
            },
            {
               name: "[debian-lts-announce] 20200710 [SECURITY] [DLA 2277-1] openjpeg2 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://pastebin.com/4sDKQ7U8",
            },
            {
               name: "GLSA-202101-29",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-29",
            },
            {
               name: "DSA-4882",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2021/dsa-4882",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com//security-alerts/cpujul2021.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-15389",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opj_image_destroy twice.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/uclouvain/openjpeg/issues/1261",
                     refsource: "MISC",
                     url: "https://github.com/uclouvain/openjpeg/issues/1261",
                  },
                  {
                     name: "[debian-lts-announce] 20200710 [SECURITY] [DLA 2277-1] openjpeg2 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuoct2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
                  },
                  {
                     name: "https://pastebin.com/4sDKQ7U8",
                     refsource: "MISC",
                     url: "https://pastebin.com/4sDKQ7U8",
                  },
                  {
                     name: "GLSA-202101-29",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-29",
                  },
                  {
                     name: "DSA-4882",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2021/dsa-4882",
                  },
                  {
                     name: "https://www.oracle.com//security-alerts/cpujul2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com//security-alerts/cpujul2021.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-15389",
      datePublished: "2020-06-29T20:30:15",
      dateReserved: "2020-06-29T00:00:00",
      dateUpdated: "2024-08-04T13:15:20.562Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-12973

Vulnerability from cvelistv5

Published

2019-06-26 17:07

Modified

2024-08-04 23:41

Severity ?

Summary

In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/108900	vdb-entry, x_refsource_BID
	http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html	mailing-list, x_refsource_MLIST
	https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
	https://github.com/uclouvain/openjpeg/pull/1185/commits/cbe7384016083eac16078b359acd7a842253d503	x_refsource_MISC
	https://github.com/uclouvain/openjpeg/commit/8ee335227bbcaf1614124046aa25e53d67b11ec3	x_refsource_MISC
	https://security.gentoo.org/glsa/202101-29	vendor-advisory, x_refsource_GENTOO
	https://www.oracle.com//security-alerts/cpujul2021.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T23:41:09.694Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "108900",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/108900",
               },
               {
                  name: "openSUSE-SU-2019:2222",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html",
               },
               {
                  name: "openSUSE-SU-2019:2223",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html",
               },
               {
                  name: "[debian-lts-announce] 20200710 [SECURITY] [DLA 2277-1] openjpeg2 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2020.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/uclouvain/openjpeg/pull/1185/commits/cbe7384016083eac16078b359acd7a842253d503",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/uclouvain/openjpeg/commit/8ee335227bbcaf1614124046aa25e53d67b11ec3",
               },
               {
                  name: "GLSA-202101-29",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-29",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com//security-alerts/cpujul2021.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-07-20T22:53:32",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "108900",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/108900",
            },
            {
               name: "openSUSE-SU-2019:2222",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html",
            },
            {
               name: "openSUSE-SU-2019:2223",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html",
            },
            {
               name: "[debian-lts-announce] 20200710 [SECURITY] [DLA 2277-1] openjpeg2 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2020.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/uclouvain/openjpeg/pull/1185/commits/cbe7384016083eac16078b359acd7a842253d503",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/uclouvain/openjpeg/commit/8ee335227bbcaf1614124046aa25e53d67b11ec3",
            },
            {
               name: "GLSA-202101-29",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-29",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com//security-alerts/cpujul2021.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-12973",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "108900",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/108900",
                  },
                  {
                     name: "openSUSE-SU-2019:2222",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00090.html",
                  },
                  {
                     name: "openSUSE-SU-2019:2223",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00088.html",
                  },
                  {
                     name: "[debian-lts-announce] 20200710 [SECURITY] [DLA 2277-1] openjpeg2 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/07/msg00008.html",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2020.html",
                  },
                  {
                     name: "https://github.com/uclouvain/openjpeg/pull/1185/commits/cbe7384016083eac16078b359acd7a842253d503",
                     refsource: "MISC",
                     url: "https://github.com/uclouvain/openjpeg/pull/1185/commits/cbe7384016083eac16078b359acd7a842253d503",
                  },
                  {
                     name: "https://github.com/uclouvain/openjpeg/commit/8ee335227bbcaf1614124046aa25e53d67b11ec3",
                     refsource: "MISC",
                     url: "https://github.com/uclouvain/openjpeg/commit/8ee335227bbcaf1614124046aa25e53d67b11ec3",
                  },
                  {
                     name: "GLSA-202101-29",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-29",
                  },
                  {
                     name: "https://www.oracle.com//security-alerts/cpujul2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com//security-alerts/cpujul2021.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-12973",
      datePublished: "2019-06-26T17:07:51",
      dateReserved: "2019-06-26T00:00:00",
      dateUpdated: "2024-08-04T23:41:09.694Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-27823

Vulnerability from cvelistv5

Published

2021-05-13 14:03

Modified

2024-08-04 16:25

Severity ?

Summary

A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

References

▼	URL	Tags
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQR4EWRFFZQDMFPZKFZ6I3USLMW6TKTP/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/	vendor-advisory, x_refsource_FEDORA
	https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2021/dsa-4882	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=1905762	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	openjpeg	Version: openjpeg 2.4.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:25:43.670Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "FEDORA-2020-4cd57a6876",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQR4EWRFFZQDMFPZKFZ6I3USLMW6TKTP/",
               },
               {
                  name: "FEDORA-2020-d32853a28d",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
               },
               {
                  name: "[debian-lts-announce] 20210208 [SECURITY] [DLA 2550-1] openjpeg2 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html",
               },
               {
                  name: "DSA-4882",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-4882",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1905762",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "openjpeg",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "openjpeg 2.4.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-20",
                     description: "CWE-20->CWE-120->CWE-787",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-05-13T14:04:18",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "FEDORA-2020-4cd57a6876",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQR4EWRFFZQDMFPZKFZ6I3USLMW6TKTP/",
            },
            {
               name: "FEDORA-2020-d32853a28d",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
            },
            {
               name: "[debian-lts-announce] 20210208 [SECURITY] [DLA 2550-1] openjpeg2 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html",
            },
            {
               name: "DSA-4882",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2021/dsa-4882",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1905762",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-27823",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "openjpeg",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "openjpeg 2.4.0",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-20->CWE-120->CWE-787",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "FEDORA-2020-4cd57a6876",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQR4EWRFFZQDMFPZKFZ6I3USLMW6TKTP/",
                  },
                  {
                     name: "FEDORA-2020-d32853a28d",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
                  },
                  {
                     name: "[debian-lts-announce] 20210208 [SECURITY] [DLA 2550-1] openjpeg2 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html",
                  },
                  {
                     name: "DSA-4882",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2021/dsa-4882",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1905762",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1905762",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-27823",
      datePublished: "2021-05-13T14:03:50",
      dateReserved: "2020-10-27T00:00:00",
      dateUpdated: "2024-08-04T16:25:43.670Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-29338

Vulnerability from cvelistv5

Published

2021-04-14 13:52

Modified

2024-08-03 22:02

Severity ?

Summary

Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files.

References

▼	URL	Tags
	https://github.com/uclouvain/openjpeg/issues/1338	x_refsource_MISC
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/	vendor-advisory, x_refsource_FEDORA
	https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/202209-04	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T22:02:51.649Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/uclouvain/openjpeg/issues/1338",
               },
               {
                  name: "FEDORA-2021-c1ac2ee5ee",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/",
               },
               {
                  name: "FEDORA-2021-e145f477df",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/",
               },
               {
                  name: "[debian-lts-announce] 20220410 [SECURITY] [DLA 2975-1] openjpeg2 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html",
               },
               {
                  name: "GLSA-202209-04",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202209-04",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when the attacker uses the command line option \"-ImgDir\" on a directory that contains 1048576 files.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-07T04:06:30",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/uclouvain/openjpeg/issues/1338",
            },
            {
               name: "FEDORA-2021-c1ac2ee5ee",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/",
            },
            {
               name: "FEDORA-2021-e145f477df",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/",
            },
            {
               name: "[debian-lts-announce] 20220410 [SECURITY] [DLA 2975-1] openjpeg2 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html",
            },
            {
               name: "GLSA-202209-04",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202209-04",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2021-29338",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when the attacker uses the command line option \"-ImgDir\" on a directory that contains 1048576 files.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/uclouvain/openjpeg/issues/1338",
                     refsource: "MISC",
                     url: "https://github.com/uclouvain/openjpeg/issues/1338",
                  },
                  {
                     name: "FEDORA-2021-c1ac2ee5ee",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/",
                  },
                  {
                     name: "FEDORA-2021-e145f477df",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/",
                  },
                  {
                     name: "[debian-lts-announce] 20220410 [SECURITY] [DLA 2975-1] openjpeg2 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html",
                  },
                  {
                     name: "GLSA-202209-04",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202209-04",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2021-29338",
      datePublished: "2021-04-14T13:52:26",
      dateReserved: "2021-03-29T00:00:00",
      dateUpdated: "2024-08-03T22:02:51.649Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-27814

Vulnerability from cvelistv5

Published

2021-01-25 18:38

Modified

2024-08-04 16:25

Severity ?

Summary

A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1901998	x_refsource_MISC
	https://github.com/uclouvain/openjpeg/issues/1283	x_refsource_MISC
	https://security.gentoo.org/glsa/202101-29	vendor-advisory, x_refsource_GENTOO
	https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2021/dsa-4882	vendor-advisory, x_refsource_DEBIAN
	https://www.oracle.com//security-alerts/cpujul2021.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	openjpeg	Version: before openjpeg 2.4.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:25:43.722Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1901998",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/uclouvain/openjpeg/issues/1283",
               },
               {
                  name: "GLSA-202101-29",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-29",
               },
               {
                  name: "[debian-lts-announce] 20210208 [SECURITY] [DLA 2550-1] openjpeg2 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html",
               },
               {
                  name: "DSA-4882",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-4882",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com//security-alerts/cpujul2021.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "openjpeg",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "before openjpeg 2.4.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-122",
                     description: "CWE-122",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-07-20T22:54:49",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1901998",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/uclouvain/openjpeg/issues/1283",
            },
            {
               name: "GLSA-202101-29",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-29",
            },
            {
               name: "[debian-lts-announce] 20210208 [SECURITY] [DLA 2550-1] openjpeg2 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html",
            },
            {
               name: "DSA-4882",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2021/dsa-4882",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com//security-alerts/cpujul2021.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-27814",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "openjpeg",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "before openjpeg 2.4.0",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could use this flaw to cause an application crash or in some cases execute arbitrary code with the permission of the user running such an application.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-122",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1901998",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1901998",
                  },
                  {
                     name: "https://github.com/uclouvain/openjpeg/issues/1283",
                     refsource: "MISC",
                     url: "https://github.com/uclouvain/openjpeg/issues/1283",
                  },
                  {
                     name: "GLSA-202101-29",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-29",
                  },
                  {
                     name: "[debian-lts-announce] 20210208 [SECURITY] [DLA 2550-1] openjpeg2 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html",
                  },
                  {
                     name: "DSA-4882",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2021/dsa-4882",
                  },
                  {
                     name: "https://www.oracle.com//security-alerts/cpujul2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com//security-alerts/cpujul2021.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-27814",
      datePublished: "2021-01-25T18:38:36",
      dateReserved: "2020-10-27T00:00:00",
      dateUpdated: "2024-08-04T16:25:43.722Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-27845

Vulnerability from cvelistv5

Published

2021-01-05 17:44

Modified

2024-08-04 16:25

Severity ?

Summary

There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1907523	x_refsource_MISC
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-29	vendor-advisory, x_refsource_GENTOO
	https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2021/dsa-4882	vendor-advisory, x_refsource_DEBIAN
	https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
	https://www.oracle.com//security-alerts/cpujul2021.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	openjpeg	Version: openjpeg 2.4.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:25:43.862Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907523",
               },
               {
                  name: "FEDORA-2020-d32853a28d",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
               },
               {
                  name: "GLSA-202101-29",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-29",
               },
               {
                  name: "[debian-lts-announce] 20210208 [SECURITY] [DLA 2550-1] openjpeg2 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html",
               },
               {
                  name: "DSA-4882",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-4882",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com//security-alerts/cpujul2021.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "openjpeg",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "openjpeg 2.4.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-07-20T22:54:55",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907523",
            },
            {
               name: "FEDORA-2020-d32853a28d",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
            },
            {
               name: "GLSA-202101-29",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-29",
            },
            {
               name: "[debian-lts-announce] 20210208 [SECURITY] [DLA 2550-1] openjpeg2 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html",
            },
            {
               name: "DSA-4882",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2021/dsa-4882",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com//security-alerts/cpujul2021.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-27845",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "openjpeg",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "openjpeg 2.4.0",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-125",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1907523",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907523",
                  },
                  {
                     name: "FEDORA-2020-d32853a28d",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
                  },
                  {
                     name: "GLSA-202101-29",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-29",
                  },
                  {
                     name: "[debian-lts-announce] 20210208 [SECURITY] [DLA 2550-1] openjpeg2 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html",
                  },
                  {
                     name: "DSA-4882",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2021/dsa-4882",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuApr2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
                  },
                  {
                     name: "https://www.oracle.com//security-alerts/cpujul2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com//security-alerts/cpujul2021.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-27845",
      datePublished: "2021-01-05T17:44:30",
      dateReserved: "2020-10-27T00:00:00",
      dateUpdated: "2024-08-04T16:25:43.862Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-3575

Vulnerability from cvelistv5

Published

2022-03-04 17:20

Modified

2024-08-03 17:01

Severity ?

Summary

A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.

References

▼	URL	Tags
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/	vendor-advisory, x_refsource_FEDORA
	https://bugzilla.redhat.com/show_bug.cgi?id=1957616	x_refsource_MISC
	https://github.com/uclouvain/openjpeg/issues/1347	x_refsource_MISC
	https://ubuntu.com/security/CVE-2021-3575	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	OpenJPEG	Version: Afeects v2.4.0 and prior.

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T17:01:08.174Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "FEDORA-2021-c1ac2ee5ee",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/",
               },
               {
                  name: "FEDORA-2021-e145f477df",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1957616",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/uclouvain/openjpeg/issues/1347",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://ubuntu.com/security/CVE-2021-3575",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "OpenJPEG",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "Afeects v2.4.0 and prior.",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-787",
                     description: "CWE-787",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-05-23T18:15:25",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "FEDORA-2021-c1ac2ee5ee",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/",
            },
            {
               name: "FEDORA-2021-e145f477df",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1957616",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/uclouvain/openjpeg/issues/1347",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://ubuntu.com/security/CVE-2021-3575",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2021-3575",
      datePublished: "2022-03-04T17:20:40",
      dateReserved: "2021-06-02T00:00:00",
      dateUpdated: "2024-08-03T17:01:08.174Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-20847

Vulnerability from cvelistv5

Published

2019-06-26 17:07

Modified

2024-08-05 12:12

Severity ?

Summary

An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow.

References

▼	URL	Tags
	https://github.com/uclouvain/openjpeg/pull/1168/commits/c58df149900df862806d0e892859b41115875845	x_refsource_MISC
	https://github.com/uclouvain/openjpeg/commit/5d00b719f4b93b1445e6fb4c766b9a9883c57949	x_refsource_MISC
	https://github.com/uclouvain/openjpeg/issues/431	x_refsource_MISC
	http://www.securityfocus.com/bid/108921	vdb-entry, x_refsource_BID
	https://lists.debian.org/debian-lts-announce/2019/07/msg00010.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T12:12:28.701Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/uclouvain/openjpeg/pull/1168/commits/c58df149900df862806d0e892859b41115875845",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/uclouvain/openjpeg/commit/5d00b719f4b93b1445e6fb4c766b9a9883c57949",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/uclouvain/openjpeg/issues/431",
               },
               {
                  name: "108921",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/108921",
               },
               {
                  name: "[debian-lts-announce] 20190710 [SECURITY] [DLA 1851-1] openjpeg2 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2019/07/msg00010.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-07-10T19:06:05",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/uclouvain/openjpeg/pull/1168/commits/c58df149900df862806d0e892859b41115875845",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/uclouvain/openjpeg/commit/5d00b719f4b93b1445e6fb4c766b9a9883c57949",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/uclouvain/openjpeg/issues/431",
            },
            {
               name: "108921",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/108921",
            },
            {
               name: "[debian-lts-announce] 20190710 [SECURITY] [DLA 1851-1] openjpeg2 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2019/07/msg00010.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-20847",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An improper computation of p_tx0, p_tx1, p_ty0 and p_ty1 in the function opj_get_encoding_parameters in openjp2/pi.c in OpenJPEG through 2.3.0 can lead to an integer overflow.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/uclouvain/openjpeg/pull/1168/commits/c58df149900df862806d0e892859b41115875845",
                     refsource: "MISC",
                     url: "https://github.com/uclouvain/openjpeg/pull/1168/commits/c58df149900df862806d0e892859b41115875845",
                  },
                  {
                     name: "https://github.com/uclouvain/openjpeg/commit/5d00b719f4b93b1445e6fb4c766b9a9883c57949",
                     refsource: "MISC",
                     url: "https://github.com/uclouvain/openjpeg/commit/5d00b719f4b93b1445e6fb4c766b9a9883c57949",
                  },
                  {
                     name: "https://github.com/uclouvain/openjpeg/issues/431",
                     refsource: "MISC",
                     url: "https://github.com/uclouvain/openjpeg/issues/431",
                  },
                  {
                     name: "108921",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/108921",
                  },
                  {
                     name: "[debian-lts-announce] 20190710 [SECURITY] [DLA 1851-1] openjpeg2 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2019/07/msg00010.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-20847",
      datePublished: "2019-06-26T17:07:43",
      dateReserved: "2019-06-26T00:00:00",
      dateUpdated: "2024-08-05T12:12:28.701Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-5727

Vulnerability from cvelistv5

Published

2018-01-16 22:00

Modified

2024-08-05 05:40

Severity ?

Summary

In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.

References

▼	URL	Tags
	https://github.com/uclouvain/openjpeg/issues/1053	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T05:40:51.355Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/uclouvain/openjpeg/issues/1053",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-01-16T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-01-16T22:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/uclouvain/openjpeg/issues/1053",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-5727",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opj_t1_encode_cblks function (openjp2/t1.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/uclouvain/openjpeg/issues/1053",
                     refsource: "MISC",
                     url: "https://github.com/uclouvain/openjpeg/issues/1053",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-5727",
      datePublished: "2018-01-16T22:00:00",
      dateReserved: "2018-01-16T00:00:00",
      dateUpdated: "2024-08-05T05:40:51.355Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-20845

Vulnerability from cvelistv5

Published

2019-06-26 17:07

Modified

2024-08-05 12:12

Severity ?

Summary

Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).

References

▼	URL	Tags
	https://github.com/uclouvain/openjpeg/pull/1168/commits/c5bd64ea146162967c29bd2af0cbb845ba3eaaaf	x_refsource_MISC
	http://www.securityfocus.com/bid/108921	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T12:12:28.671Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/uclouvain/openjpeg/pull/1168/commits/c5bd64ea146162967c29bd2af0cbb845ba3eaaaf",
               },
               {
                  name: "108921",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/108921",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-06-28T14:06:05",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/uclouvain/openjpeg/pull/1168/commits/c5bd64ea146162967c29bd2af0cbb845ba3eaaaf",
            },
            {
               name: "108921",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/108921",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-20845",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service (application crash).",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/uclouvain/openjpeg/pull/1168/commits/c5bd64ea146162967c29bd2af0cbb845ba3eaaaf",
                     refsource: "MISC",
                     url: "https://github.com/uclouvain/openjpeg/pull/1168/commits/c5bd64ea146162967c29bd2af0cbb845ba3eaaaf",
                  },
                  {
                     name: "108921",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/108921",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-20845",
      datePublished: "2019-06-26T17:07:27",
      dateReserved: "2019-06-26T00:00:00",
      dateUpdated: "2024-08-05T12:12:28.671Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-5785

Vulnerability from cvelistv5

Published

2018-01-19 08:00

Modified

2024-08-05 05:47

Severity ?

Summary

In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder function (openjp2/j2k.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.

References

▼	URL	Tags
	https://github.com/uclouvain/openjpeg/issues/1057	x_refsource_MISC
	https://www.debian.org/security/2019/dsa-4405	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/4109-1/	vendor-advisory, x_refsource_UBUNTU

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T05:47:55.265Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/uclouvain/openjpeg/issues/1057",
               },
               {
                  name: "DSA-4405",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2019/dsa-4405",
               },
               {
                  name: "USN-4109-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4109-1/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2018-01-19T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder function (openjp2/j2k.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-08-21T19:06:08",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/uclouvain/openjpeg/issues/1057",
            },
            {
               name: "DSA-4405",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2019/dsa-4405",
            },
            {
               name: "USN-4109-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4109-1/",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2018-5785",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In OpenJPEG 2.3.0, there is an integer overflow caused by an out-of-bounds left shift in the opj_j2k_setup_encoder function (openjp2/j2k.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/uclouvain/openjpeg/issues/1057",
                     refsource: "MISC",
                     url: "https://github.com/uclouvain/openjpeg/issues/1057",
                  },
                  {
                     name: "DSA-4405",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2019/dsa-4405",
                  },
                  {
                     name: "USN-4109-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4109-1/",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2018-5785",
      datePublished: "2018-01-19T08:00:00",
      dateReserved: "2018-01-19T00:00:00",
      dateUpdated: "2024-08-05T05:47:55.265Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-27842

Vulnerability from cvelistv5

Published

2021-01-05 17:21

Modified

2024-08-04 16:25

Severity ?

Summary

There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1907513	x_refsource_MISC
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-29	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2021/dsa-4882	vendor-advisory, x_refsource_DEBIAN
	https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
	https://www.oracle.com//security-alerts/cpujul2021.html	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	openjpeg	Version: openjpeg 2.4.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:25:43.575Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907513",
               },
               {
                  name: "FEDORA-2020-d32853a28d",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
               },
               {
                  name: "GLSA-202101-29",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-29",
               },
               {
                  name: "DSA-4882",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-4882",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com//security-alerts/cpujul2021.html",
               },
               {
                  name: "[debian-lts-announce] 20220410 [SECURITY] [DLA 2975-1] openjpeg2 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "openjpeg",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "openjpeg 2.4.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-04-10T14:06:12",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907513",
            },
            {
               name: "FEDORA-2020-d32853a28d",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
            },
            {
               name: "GLSA-202101-29",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-29",
            },
            {
               name: "DSA-4882",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2021/dsa-4882",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com//security-alerts/cpujul2021.html",
            },
            {
               name: "[debian-lts-announce] 20220410 [SECURITY] [DLA 2975-1] openjpeg2 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-27842",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "openjpeg",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "openjpeg 2.4.0",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-125",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1907513",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907513",
                  },
                  {
                     name: "FEDORA-2020-d32853a28d",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
                  },
                  {
                     name: "GLSA-202101-29",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-29",
                  },
                  {
                     name: "DSA-4882",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2021/dsa-4882",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuApr2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
                  },
                  {
                     name: "https://www.oracle.com//security-alerts/cpujul2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com//security-alerts/cpujul2021.html",
                  },
                  {
                     name: "[debian-lts-announce] 20220410 [SECURITY] [DLA 2975-1] openjpeg2 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-27842",
      datePublished: "2021-01-05T17:21:40",
      dateReserved: "2020-10-27T00:00:00",
      dateUpdated: "2024-08-04T16:25:43.575Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-27824

Vulnerability from cvelistv5

Published

2021-05-13 13:56

Modified

2024-08-04 16:25

Severity ?

Summary

A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability.

References

▼	URL	Tags
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQR4EWRFFZQDMFPZKFZ6I3USLMW6TKTP/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/	vendor-advisory, x_refsource_FEDORA
	https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2021/dsa-4882	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.redhat.com/show_bug.cgi?id=1905723	x_refsource_MISC
	https://www.oracle.com/security-alerts/cpuoct2021.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	openjpeg	Version: openjpeg 2.4.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:25:43.431Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "FEDORA-2020-4cd57a6876",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQR4EWRFFZQDMFPZKFZ6I3USLMW6TKTP/",
               },
               {
                  name: "FEDORA-2020-d32853a28d",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
               },
               {
                  name: "[debian-lts-announce] 20210208 [SECURITY] [DLA 2550-1] openjpeg2 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html",
               },
               {
                  name: "DSA-4882",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-4882",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1905723",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuoct2021.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "openjpeg",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "openjpeg 2.4.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-20",
                     description: "CWE-20->CWE-120->CWE-125",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-10-20T10:39:40",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               name: "FEDORA-2020-4cd57a6876",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQR4EWRFFZQDMFPZKFZ6I3USLMW6TKTP/",
            },
            {
               name: "FEDORA-2020-d32853a28d",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
            },
            {
               name: "[debian-lts-announce] 20210208 [SECURITY] [DLA 2550-1] openjpeg2 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html",
            },
            {
               name: "DSA-4882",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2021/dsa-4882",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1905723",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuoct2021.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-27824",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "openjpeg",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "openjpeg 2.4.0",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input to decomposition levels to cause a buffer overflow. The highest threat from this vulnerability is to system availability.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-20->CWE-120->CWE-125",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "FEDORA-2020-4cd57a6876",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OQR4EWRFFZQDMFPZKFZ6I3USLMW6TKTP/",
                  },
                  {
                     name: "FEDORA-2020-d32853a28d",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
                  },
                  {
                     name: "[debian-lts-announce] 20210208 [SECURITY] [DLA 2550-1] openjpeg2 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2021/02/msg00011.html",
                  },
                  {
                     name: "DSA-4882",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2021/dsa-4882",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1905723",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1905723",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuoct2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuoct2021.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-27824",
      datePublished: "2021-05-13T13:56:17",
      dateReserved: "2020-10-27T00:00:00",
      dateUpdated: "2024-08-04T16:25:43.431Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-27843

Vulnerability from cvelistv5

Published

2021-01-05 17:22

Modified

2024-08-04 16:25

Severity ?

Summary

A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability.

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=1907516	x_refsource_MISC
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202101-29	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2021/dsa-4882	vendor-advisory, x_refsource_DEBIAN
	https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
	https://www.oracle.com//security-alerts/cpujul2021.html	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	openjpeg	Version: openjpeg 2.4.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T16:25:43.322Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907516",
               },
               {
                  name: "FEDORA-2020-d32853a28d",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
               },
               {
                  name: "GLSA-202101-29",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202101-29",
               },
               {
                  name: "DSA-4882",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2021/dsa-4882",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com//security-alerts/cpujul2021.html",
               },
               {
                  name: "[debian-lts-announce] 20220410 [SECURITY] [DLA 2975-1] openjpeg2 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "openjpeg",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "openjpeg 2.4.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-04-10T14:06:07",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907516",
            },
            {
               name: "FEDORA-2020-d32853a28d",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
            },
            {
               name: "GLSA-202101-29",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202101-29",
            },
            {
               name: "DSA-4882",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2021/dsa-4882",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com//security-alerts/cpujul2021.html",
            },
            {
               name: "[debian-lts-announce] 20220410 [SECURITY] [DLA 2975-1] openjpeg2 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "secalert@redhat.com",
               ID: "CVE-2020-27843",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "openjpeg",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "openjpeg 2.4.0",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-125",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1907516",
                     refsource: "MISC",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1907516",
                  },
                  {
                     name: "FEDORA-2020-d32853a28d",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WJUPGIZE6A4O52EBOF75MCXJOL6MUCRV/",
                  },
                  {
                     name: "GLSA-202101-29",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202101-29",
                  },
                  {
                     name: "DSA-4882",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2021/dsa-4882",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuApr2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
                  },
                  {
                     name: "https://www.oracle.com//security-alerts/cpujul2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com//security-alerts/cpujul2021.html",
                  },
                  {
                     name: "[debian-lts-announce] 20220410 [SECURITY] [DLA 2975-1] openjpeg2 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2020-27843",
      datePublished: "2021-01-05T17:22:06",
      dateReserved: "2020-10-27T00:00:00",
      dateUpdated: "2024-08-04T16:25:43.322Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature