Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <asjBQ7umQss_YTol@symphytum.spacehopper.org>
Date: Fri, 9 Oct 2026 11:26:11 +0100
From: Stuart Henderson <stu@...cehopper.org>
To: oss-security@...ts.openwall.com
Subject: Re: OpenJPEG: heap-buffer-overflow write fixed on
 master since Feb 2026, still present in every release (2.5.3, 2.5.4)

On 2026/10/08 00:51, TheSecguy wrote:
> I contacted the OpenJPEG maintainer

It is unmaintained:

https://github.com/uclouvain/openjpeg/commit/06bbae8b5d5e57f8c28fe862b80a9464b320e314

"This repository should be considered unmaintained. Commits may appear
from time to time depending on committer interest and mood, but no
committer currently feel responsible to regularly review tickets or pull
requests."

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.