CVE-2018-6616

openjpeg2-devel: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from t...

CVE-2018-6616 is fixed in 12 products on 1 platform, first by libopenjp2-7 2.3.0-2build0.18.04.1, released October 8, 2018. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
3.3
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0166
76th percentile

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes linked from the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
libopenjp2-7 · Ubuntu 18.04.6 LTS (bionic) 2.3.0-2build0.18.04.1 libopenjp2-7 2.3.0-2build0.18.04.1 Oct 8, 2018
libopenjp2-tools · Ubuntu 18.04.6 LTS (bionic) 2.3.0-2build0.18.04.1 libopenjp2-tools 2.3.0-2build0.18.04.1 Oct 8, 2018
libopenjp3d-tools · Ubuntu 18.04.6 LTS (bionic) 2.3.0-2build0.18.04.1 libopenjp3d-tools 2.3.0-2build0.18.04.1 Oct 8, 2018
libopenjp3d7 · Ubuntu 18.04.6 LTS (bionic) 2.3.0-2build0.18.04.1 libopenjp3d7 2.3.0-2build0.18.04.1 Oct 8, 2018
libopenjpip-dec-server · Ubuntu 18.04.6 LTS (bionic) 2.3.0-2build0.18.04.1 libopenjpip-dec-server 2.3.0-2build0.18.04.1 Oct 8, 2018
libopenjpip-server · Ubuntu 18.04.6 LTS (bionic) 2.3.0-2build0.18.04.1 libopenjpip-server 2.3.0-2build0.18.04.1 Oct 8, 2018
libopenjpip-viewer · Ubuntu 18.04.6 LTS (bionic) 2.3.0-2build0.18.04.1 libopenjpip-viewer 2.3.0-2build0.18.04.1 Oct 8, 2018
libopenjpip7 · Ubuntu 18.04.6 LTS (bionic) 2.3.0-2build0.18.04.1 libopenjpip7 2.3.0-2build0.18.04.1 Oct 8, 2018
openjpeg2 · RHEL 8 0:2.3.1-1.el8 RHBA-2019:3408 Nov 5, 2019
openjpeg2-devel · RHEL 8 0:2.3.1-1.el8 RHBA-2019:3408 Nov 5, 2019
openjpeg2-devel-docs · RHEL 8 0:2.3.1-1.el8 RHBA-2019:3408 Nov 5, 2019
openjpeg2-tools · RHEL 8 0:2.3.1-1.el8 RHBA-2019:3408 Nov 5, 2019