- drop maintainershipf25e0cd253
OpenJPEG -- integer overflowentered 2019-02-11
Open-source JPEG 2000 codec
# pkg install openjpeginstalls 2.5.4_2 from latest; from quarterly (2026Q4) 2.5.4_2# cd /usr/ports/graphics/openjpeg && make install clean| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.5.4_2 | 2.5.4_2 | – |
| FreeBSD 15 | 2.5.4_2 | 2.5.4_2 | – |
| FreeBSD 14 | 2.5.4_2 | 2.5.4_2 | 2.5.4_2 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.5.4_2 | 2.5.4_2 | – |
| FreeBSD 14 | 2.5.4_2 | 2.5.4_2 | 2.5.4_2 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
The CVE record lists the packaged version 2.5.4_2 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-6192 | 4.8 | 2026-04-13 | A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opj_pi_initialise_encode in the library src/lib/openjp2/pi.c. The manipulatio… |
Listed in VuXML, the packaged version 2.5.4_2 is still in the affected range; pkg audit reports it. What does this mean?
CVE-2017-17479, CVE-2017-17480, CVE-2018-5785, CVE-2018-6616
no CVE referenced
CVE-2012-3358, CVE-2012-3535, CVE-2013-1447, CVE-2013-4289, CVE-2013-4290, CVE-2013-6045, CVE-2013-6052, CVE-2013-6053, CVE-2013-6054, CVE-2013-6887
| PR | Summary | Status | Changed |
|---|---|---|---|
| 297807 | maintainer-feedback? graphics/openjpeg: (unit) test suit is missing | New | 2026-08-23 |
- drop maintainershipf25e0cd253
- make portlint happier - fix path in pkg_config file Submitted by: Zhihao Yuan5dcc37da05
- update to 1.5.0 - new MASTER_SITE PR: 166744 Suggested by: Zhihao Yuan3d2a969d29
- drop MASTER_SITE_LOCALeec0b8368e
-remove MD530f9161773
- cleanup LICENSE_FILE3ad176ba7c
- add COPYRIGHT - add MASTER_SITES7a72368020
LICENSE BSD0862ea05a1
- update to jpeg-8ca9c60461c
- honor CC PR: 139965 Submitted by: swell.kc87ced7ae5
- bump all port that indirectly depends on libjpeg and have not yet been bumped or updated Requested by: edwineca78ec61b
- MAKE_JOBS_UNSAFEc602617259
- add LICENSE:951434a20f
- update to 1.306f759a55e
Pass maintainership to dinoex@.549137d6ae
- Don't strip libraries - Build and install j2k utils PR: ports/114694 Submitted by: ahze Approved by: miwi (mentor)53df5e02b2
Add ${MASTER_SITE_LOCAL}.
Suggested by: pav
Approved by: miwi (mentor)afd4147f0c- Remove unneeded part of a diff. Suggested by: sat Approved by: miwi (mentor)0804a3d20c
- Use proper capitalization in my email address. Approved by: miwi (mentor) Suggested by: sat627cb575f7
- Update to 1.2. Approved by: miwi (mentor)a2b767bd8a
- Add required symlinks to the shared object, so that putting openjpeg into LIB_DEPENDS and linking with just '-lopenjpeg' actually work - Tidy the port a bit Submitted by: alepulver Approved by: miwi (mentor)f11c334dd2
Change my email address to trasz@FreeBSD.org. Approved by: miwi (mentor)985042c3ae
- Update to 1.1.1 PR: 110927 Submitted by: trasz (maintainer)23f252a0e7
- Fix build with amd64 Submitted by: pointyhat via krisbb02f8b91f
The OpenJPEG library is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, the new still-image compression standard from the Joint Photographic Experts Group (JPEG). In addition to the basic codec, various other features are under development, among them the JP2 and MJ2 (Motion JPEG 2000) file formats, an indexing tool useful for WWW: http://www.openjpeg.org/ PR: ports/107868 Submitted by: trasz <trasz at pin.if.uz.zgora.pl>a093780d07