gpp_maybe Security update for jasper

slessp4-jasper-13051

This update for jasper fixes the following issues: Security issues fixed: - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec (bsc#1012530) - CVE-2016-9395: Missing sanity checks on the data in a SIZ marker segment (bsc#1010977). - CVE-2016-9398: jpc_math.c:94: int jpc_floorlog2(int): Assertion 'x > 0' failed. (bsc#1010979) - CVE-2016-9560: stack-based buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c) (bsc#1011830) - CVE-2016-9583: Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400) - CVE-2016-9591: Use-after-free on heap in jas_matrix_destroy (bsc#1015993) - CVE-2016-9600: Null Pointer Dereference due to missing check for UNKNOWN color space in JP2 encoder (bsc#1018088) - CVE-2016-10251: Use of uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c) (bsc#1029497) - CVE-2017-5498: left-shift undefined behaviour (bsc#1020353) - CVE-2017-6850: NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c) (bsc#1021868)

Release Date

Apr 5 2017
References

Bugzilla: 1029497, 1011830, 1015993, 1012530, 1010979, 1018088, 1020353, 1010977, 1021868, 1015400
CVEs: CVE-2016-8654, CVE-2016-9591, CVE-2016-10251, CVE-2016-9560, CVE-2017-5498, CVE-2016-9398, CVE-2016-9600, CVE-2016-9395, CVE-2016-9583, CVE-2017-6850
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server 11.4 i586

Packages

jasper
An Implementation of the JPEG-2000 Standard, Part 1

1.900.14-134.32.1 lock src

libjasper
JPEG-2000 library

1.900.14-134.32.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

Packages

jasper
An Implementation of the JPEG-2000 Standard, Part 1

1.900.14-134.32.1 lock src

libjasper
JPEG-2000 library

1.900.14-134.32.1 lock rpm

libjasper-32bit
JPEG-2000 library

1.900.14-134.32.1 lock rpm

SUSE Linux Enterprise Server 11.4 ia64

Packages

jasper
An Implementation of the JPEG-2000 Standard, Part 1

1.900.14-134.32.1 lock src

libjasper
JPEG-2000 library

1.900.14-134.32.1 lock rpm

libjasper-x86
JPEG-2000 library

1.900.14-134.32.1 lock rpm

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

Packages

jasper
An Implementation of the JPEG-2000 Standard, Part 1

1.900.14-134.32.1 lock src

libjasper
JPEG-2000 library

1.900.14-134.32.1 lock rpm

libjasper-32bit
JPEG-2000 library

1.900.14-134.32.1 lock rpm

SUSE Linux Enterprise Server 11.4 s390x

Packages

jasper
An Implementation of the JPEG-2000 Standard, Part 1

1.900.14-134.32.1 lock src

libjasper
JPEG-2000 library

1.900.14-134.32.1 lock rpm

libjasper-32bit
JPEG-2000 library

1.900.14-134.32.1 lock rpm

gpp_maybe Security update for jasper slessp4-jasper-13051