OVMSA-2014-0087

OVMSA-2014-0087 - jasper security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2014-12-24

Description


[1.900.1-16.2]
- CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173566)
- CVE-2014-8138 - heap overflow in jp2_decode (#1173566)


Related CVEs


CVE-2014-8138
CVE-2014-8137
CVE-2014-9029

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle VM 3.3 (x86_64) jasper-1.900.1-16.el6_6.2.src.rpmd48c084ffe37f084e7dd29695b92792c4a6ab61eba2cf33a099831cb16bb946cOVMSA-2017-0102ovm3_x86_64_3.3_patch
jasper-libs-1.900.1-16.el6_6.2.x86_64.rpmc88fcac00a7d7dd64e1639bbdc7ad33dbfd4dda65129b2d5f87ea0f496946da9OVMSA-2017-0102ovm3_x86_64_3.3_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete