shield Security update for jasper

SUSE-SLE-SDK-12-SP1-2017-551

This update for jasper fixes the following issues: Security issues fixed: - CVE-2016-9600: Null Pointer Dereference due to missing check for UNKNOWN color space in JP2 encoder (bsc#1018088) - CVE-2016-10251: Use of uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c) (bsc#1029497) - CVE-2017-5498: left-shift undefined behaviour (bsc#1020353) - CVE-2017-6850: NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c) (bsc#1021868) - CVE-2016-9583: Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400)

• Release Date
  Apr 6 2017
• References
  Bugzilla: 1020353, 1029497, 1018088, 1021868, 1015400
  CVEs: CVE-2016-9600, CVE-2017-5498, CVE-2016-10251, CVE-2017-6850, CVE-2016-9583
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.1 ppc64le

• Packages
  jasper
  An Implementation of the JPEG-2000 Standard, Part 1

  1.900.14-194.1 lock src

  libjasper-devel
  JPEG-2000 library - files mandatory for development

  1.900.14-194.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.1 s390x

• Packages
  jasper
  An Implementation of the JPEG-2000 Standard, Part 1

  1.900.14-194.1 lock src

  libjasper-devel
  JPEG-2000 library - files mandatory for development

  1.900.14-194.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.1 x86_64

• Packages
  jasper
  An Implementation of the JPEG-2000 Standard, Part 1

  1.900.14-194.1 lock src

  libjasper-devel
  JPEG-2000 library - files mandatory for development

  1.900.14-194.1 lock rpm