shield
Security update for jasper
SUSE-SLE-SDK-12-2015-73
jasper was updated to fix two security issues. These security issues were fixed: - CVE-2014-8157: Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allowed remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image, which triggers a heap-based buffer overflow (bnc#911837). CVE-2014-8158: Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allowed remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image (bnc#911837).
-
Release DateFeb 2 2015
-
References
-
Typesecurity
-
Severitymoderate
cloud_download Downloads
SUSE Linux Enterprise Software Development Kit 12 s390x
-
Packagesjasper
An Implementation of the JPEG-2000 Standard, Part 1libjasper-devel1.900.1-170.1 lock src
JPEG-2000 library - files mandatory for development1.900.1-170.1 lock rpm
SUSE Linux Enterprise Software Development Kit 12 ppc64le
-
Packagesjasper
An Implementation of the JPEG-2000 Standard, Part 1libjasper-devel1.900.1-170.1 lock src
JPEG-2000 library - files mandatory for development1.900.1-170.1 lock rpm
SUSE Linux Enterprise Software Development Kit 12 x86_64
-
Packagesjasper
An Implementation of the JPEG-2000 Standard, Part 1libjasper-devel1.900.1-170.1 lock src
JPEG-2000 library - files mandatory for development1.900.1-170.1 lock rpm