ELSA-2014-2021

ELSA-2014-2021 - jasper security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2014-12-18

Description

[1.900.1-16.2]
- CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173566)
- CVE-2014-8138 - heap overflow in jp2_decode (#1173566)

[1.900.1-16.1]
- CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
marker segment decoders (#1171208)

[1.900.1-16]
- CERT VU#887409: heap buffer overflow flaws lead to arbitrary code execution
(#749150)

Related CVEs

CVE-2014-8137

CVE-2014-8138

CVE-2014-9029

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	jasper-1.900.1-16.el6_6.2.src.rpm	502437f609293b22a17812d08fcbe9ce	ELBA-2018-1873
	jasper-1.900.1-16.el6_6.2.i686.rpm	b4b813271ac5f23312322f1c8eb5c75f	ELBA-2018-1873
	jasper-devel-1.900.1-16.el6_6.2.i686.rpm	bc68154a480c657373748895a88c76fd	ELBA-2018-1873
	jasper-libs-1.900.1-16.el6_6.2.i686.rpm	d44e551057f74e6db702839c27e8bbca	ELBA-2018-1873
	jasper-utils-1.900.1-16.el6_6.2.i686.rpm	c5f63b9f2894f7d5b12ac358872e3216	ELBA-2018-1873
Oracle Linux 6 (x86_64)	jasper-1.900.1-16.el6_6.2.src.rpm	502437f609293b22a17812d08fcbe9ce	ELBA-2018-1873
	jasper-1.900.1-16.el6_6.2.x86_64.rpm	9d5aa5531d589f99bd67ae8830f88005	ELBA-2018-1873
	jasper-devel-1.900.1-16.el6_6.2.i686.rpm	bc68154a480c657373748895a88c76fd	ELBA-2018-1873
	jasper-devel-1.900.1-16.el6_6.2.x86_64.rpm	2678118af84f29fd94f836c2ffeb349f	ELBA-2018-1873
	jasper-libs-1.900.1-16.el6_6.2.i686.rpm	d44e551057f74e6db702839c27e8bbca	ELBA-2018-1873
	jasper-libs-1.900.1-16.el6_6.2.x86_64.rpm	350bf78d5b759a5938e2ffd162c0c177	ELBA-2018-1873
	jasper-utils-1.900.1-16.el6_6.2.x86_64.rpm	709f2de150f76888cd69b1732abe9caf	ELBA-2018-1873
Oracle Linux 7 (x86_64)	jasper-1.900.1-26.el7_0.2.src.rpm	d2282e29fd0394edc52a8c9f9411061c	ELSA-2018-3253
	jasper-1.900.1-26.el7_0.2.x86_64.rpm	6812c926286aaafe8a9962e4ebf56a9b	ELSA-2018-3253
	jasper-devel-1.900.1-26.el7_0.2.i686.rpm	e1be322c32e571e6d588a2f75080a75b	ELSA-2018-3253
	jasper-devel-1.900.1-26.el7_0.2.x86_64.rpm	23dbc48ccfa1c4cf4a31ccdeea3fdfb3	ELSA-2018-3253
	jasper-libs-1.900.1-26.el7_0.2.i686.rpm	a5a47f88c6618d2c1b7a9519e8d78820	ELSA-2018-3253
	jasper-libs-1.900.1-26.el7_0.2.x86_64.rpm	b84b9ad914663b57a4e42b788e262c19	ELSA-2018-3253
	jasper-utils-1.900.1-26.el7_0.2.x86_64.rpm	80c640206803e056555916f3a553b305	ELSA-2018-3253

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team