OESA-2026-2022

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-2022

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-2022.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-2022

Upstream

CVE-2026-6192

Published

2026-04-25T05:48:34Z

Modified

2026-04-25T06:02:53.507636Z

Summary

openjpeg2 security update

Details

OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group (JPEG). Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000 Reference Software.

Security Fix(es):

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialise_encode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The identifier of the patch is 839936aa33eb8899bbbd80fda02796bb65068951. It is suggested to install a patch to address this issue.(CVE-2026-6192)

Database specific

{
    "severity": "Low"
}

References

Affected packages

openEuler:24.03-LTS-SP1 / openjpeg2

Package

Name: openjpeg2
Purl: pkg:rpm/openEuler/openjpeg2&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.5.0-9.oe2403sp1

Ecosystem specific

{
    "src": [
        "openjpeg2-2.5.0-9.oe2403sp1.src.rpm"
    ],
    "aarch64": [
        "openjpeg2-2.5.0-9.oe2403sp1.aarch64.rpm",
        "openjpeg2-debuginfo-2.5.0-9.oe2403sp1.aarch64.rpm",
        "openjpeg2-debugsource-2.5.0-9.oe2403sp1.aarch64.rpm",
        "openjpeg2-devel-2.5.0-9.oe2403sp1.aarch64.rpm",
        "openjpeg2-tools-2.5.0-9.oe2403sp1.aarch64.rpm"
    ],
    "x86_64": [
        "openjpeg2-2.5.0-9.oe2403sp1.x86_64.rpm",
        "openjpeg2-debuginfo-2.5.0-9.oe2403sp1.x86_64.rpm",
        "openjpeg2-debugsource-2.5.0-9.oe2403sp1.x86_64.rpm",
        "openjpeg2-devel-2.5.0-9.oe2403sp1.x86_64.rpm",
        "openjpeg2-tools-2.5.0-9.oe2403sp1.x86_64.rpm"
    ],
    "noarch": [
        "openjpeg2-help-2.5.0-9.oe2403sp1.noarch.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-2022.json"