ELSA-2017-1208

ELSA-2017-1208 - jasper security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2017-05-09

Description

[1.900.1-21]
- Bump release

[1.900.1-20]
- Multiple security fixes (fixed by thoger):
CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
- Fix implicit declaration warning caused by security fixes above

[1.900.1-19]
- CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183672)
- CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183680)

[1.900.1-18]
- CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173567)
- CVE-2014-8138 - heap overflow in jp2_decode (#1173567)

[1.900.1-17]
- CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
marker segment decoders (#1171209)

Related CVEs

CVE-2016-10248

CVE-2016-10251

CVE-2016-2089

CVE-2016-2116

CVE-2016-8691

CVE-2016-8885

CVE-2016-9388

CVE-2016-9389

CVE-2016-9390

CVE-2016-9391

CVE-2016-9560

CVE-2016-9583

CVE-2016-9591

CVE-2016-9600

CVE-2015-5203

CVE-2015-5221

CVE-2016-10249

CVE-2016-1577

CVE-2016-1867

CVE-2016-8654

CVE-2016-8690

CVE-2016-8692

CVE-2016-8693

CVE-2016-8883

CVE-2016-8884

CVE-2016-9262

CVE-2016-9387

CVE-2016-9392

CVE-2016-9393

CVE-2016-9394

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	jasper-1.900.1-21.el6_9.src.rpm	c508c6c99a9ba09783326b86977d3a27	ELBA-2018-1873
	jasper-1.900.1-21.el6_9.i686.rpm	90b9df5525ea3318c49f6f233bde72f5	ELBA-2018-1873
	jasper-devel-1.900.1-21.el6_9.i686.rpm	9cf7e6c2ae45d9e4994ac24b2a2f4700	ELBA-2018-1873
	jasper-libs-1.900.1-21.el6_9.i686.rpm	7ca1c0215673bea23891ca147d2fca52	ELBA-2018-1873
	jasper-utils-1.900.1-21.el6_9.i686.rpm	be658068f3dbf642d7e136f2fed16cb5	ELBA-2018-1873
Oracle Linux 6 (x86_64)	jasper-1.900.1-21.el6_9.src.rpm	c508c6c99a9ba09783326b86977d3a27	ELBA-2018-1873
	jasper-1.900.1-21.el6_9.x86_64.rpm	39fdf43fd99dc325941b0190542a38eb	ELBA-2018-1873
	jasper-devel-1.900.1-21.el6_9.i686.rpm	9cf7e6c2ae45d9e4994ac24b2a2f4700	ELBA-2018-1873
	jasper-devel-1.900.1-21.el6_9.x86_64.rpm	69893147daaa5dcebbfb716333633ef7	ELBA-2018-1873
	jasper-libs-1.900.1-21.el6_9.i686.rpm	7ca1c0215673bea23891ca147d2fca52	ELBA-2018-1873
	jasper-libs-1.900.1-21.el6_9.x86_64.rpm	20917f585f1bf7026f998bc648f7cdce	ELBA-2018-1873
	jasper-utils-1.900.1-21.el6_9.x86_64.rpm	662918011eee4061e94f6cad9e59bd1e	ELBA-2018-1873
Oracle Linux 7 (x86_64)	jasper-1.900.1-30.el7_3.src.rpm	c5d286120d626edbe58ec7e3d746302c	ELSA-2018-3253
	jasper-1.900.1-30.el7_3.x86_64.rpm	0e449986f1ce320db7b9d4c0be0be019	ELSA-2018-3253
	jasper-devel-1.900.1-30.el7_3.i686.rpm	da611b9c20bbd532472bddaf05bb2941	ELSA-2018-3253
	jasper-devel-1.900.1-30.el7_3.x86_64.rpm	a31fab442555039baf55168fb974e374	ELSA-2018-3253
	jasper-libs-1.900.1-30.el7_3.i686.rpm	ceba9ec1ab4e713d2a5632aef8aec7c8	ELSA-2018-3253
	jasper-libs-1.900.1-30.el7_3.x86_64.rpm	6f15856913f9185bc4b80fe1bffeb961	ELSA-2018-3253
	jasper-utils-1.900.1-30.el7_3.x86_64.rpm	39bd13349fba25c5e81a691e27f68ffd	ELSA-2018-3253

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team