OVMSA-2015-0006 - jasper security update
| Type: | SECURITY |
| Severity: | IMPORTANT |
| Release Date: | 2015-01-23 |
Description
[1.900.1-16.3]
- CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183671)
- CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183679)
[1.900.1-16.2]
- CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173566)
- CVE-2014-8138 - heap overflow in jp2_decode (#1173566)
[1.900.1-16.1]
- CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
marker segment decoders (#1171208)
Related CVEs
Updated Packages
| Release/Architecture | Filename | MD5sum | Superseded By Advisory |
|
| Oracle VM 3.3 (x86_64) | jasper-1.900.1-16.el6_6.3.src.rpm | a581f3a94342f60e5e7546906f1fe066 | OVMSA-2017-0102 |
| jasper-libs-1.900.1-16.el6_6.3.x86_64.rpm | eb5fa0cd4392c9dde7305276d1ffafa1 | OVMSA-2017-0102 |
|
| Oracle VM 3.4 (x86_64) | jasper-1.900.1-16.el6_6.3.src.rpm | a581f3a94342f60e5e7546906f1fe066 | OVMSA-2017-0102 |
| jasper-libs-1.900.1-16.el6_6.3.x86_64.rpm | eb5fa0cd4392c9dde7305276d1ffafa1 | OVMSA-2017-0102 |
This page is generated automatically and has not been checked for errors or omissions. For clarification
or corrections please contact the Oracle Linux ULN team
