shield Security update for jasper

SUSE-SLE-SERVER-12-SP4-2019-2513

This update for jasper fixes the following issues: Security issues fixed: - CVE-2018-19540: Fixed a heap based overflow in jas_icctxtdesc_input (bsc#1117508). - CVE-2018-19541: Fix heap based overread in jas_image_depalettize (bsc#1117507). - CVE-2018-19542: Fixed a denial of service in jp2_decode (bsc#1117505). - CVE-2018-19539: Fixed a denial of service in jas_image_readcmpt (bsc#1117511). - CVE-2016-9396: Fixed a denial of service in jpc_cox_getcompparms (bsc#1010783).

• Release Date
  Oct 2 2019
• References
  Bugzilla: 1117507, 1117508, 1117511, 1117505, 1010783
  CVEs: CVE-2018-19541, CVE-2018-19540, CVE-2016-9396, CVE-2018-19539, CVE-2018-19542
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.4 x86_64

• Packages
  jasper
  An Implementation of the JPEG-2000 Standard, Part 1

  1.900.14-195.15.1

  lock src

  libjasper1
  JPEG-2000 library

  1.900.14-195.15.1

  lock rpm

  libjasper1-32bit
  JPEG-2000 library

  1.900.14-195.15.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  jasper
  An Implementation of the JPEG-2000 Standard, Part 1

  1.900.14-195.15.1

  lock src

  libjasper1
  JPEG-2000 library

  1.900.14-195.15.1

  lock rpm

SUSE Linux Enterprise Server 12.4 aarch64

• Packages
  jasper
  An Implementation of the JPEG-2000 Standard, Part 1

  1.900.14-195.15.1

  lock src

  libjasper1
  JPEG-2000 library

  1.900.14-195.15.1

  lock rpm

SUSE Linux Enterprise Server 12.4 s390x

• Packages
  jasper
  An Implementation of the JPEG-2000 Standard, Part 1

  1.900.14-195.15.1

  lock src

  libjasper1
  JPEG-2000 library

  1.900.14-195.15.1

  lock rpm

  libjasper1-32bit
  JPEG-2000 library

  1.900.14-195.15.1

  lock rpm