52 matches found
Fedora 19 : mingw-jasper-1.900.1-24.fc19 (2014-17032)
Add patches for all current CVEs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...
Fedora 20 : mingw-jasper-1.900.1-24.fc20 (2014-17027)
Add patches for all current CVEs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...
Fedora 21 : mingw-jasper-1.900.1-24.fc21 (2014-16961)
Add patches for all current CVEs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...
Fedora Update for mingw-jasper FEDORA-2014-17032
Check the version of mingw-jasper SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868612";...
Fedora Update for mingw-jasper FEDORA-2014-17027
Check the version of mingw-jasper SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868613";...
openSUSE Security Update : jasper (openSUSE-SU-2014:1644-1)
jasper was updated to fix one security issue. This security issue was fixed : - Heap overflows in libjasper CVE-2014-9029. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-781. Th...
CVE-2014-9029
CVE-2014-9029 affects JasPer 1.900.1 and earlier; multiple off-by-one/heap-based overflow in jpc_dec_cp_setfromcox and jpc_dec_cp_setfromrgn (and related JP2 decoding paths) could allow remote code execution via a crafted JPEG 2000 file. Public advisories report patched releases; mitigate by upgr...
[oCERT-2014-009] JasPer input sanitization errors
2014-009 JasPer input sanitization errors Description: The JasPer project is an open source implementation for the JPEG-2000 codec. The library is affected by two heap-based buffer overflows which can lead to arbitrary code execution. The vulnerability is present in functions jpcdeccpsetfromcox a...
[SECURITY] [DLA 101-1] jasper security update
Package : jasper Version : 1.900.1-7+squeeze2 CVE ID : CVE-2014-9029 Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, a library for manipulating JPEG-2000 files, which could lead to denial of service application crash or the execution of arbitrary code...
Updated jasper packages fix CVE-2014-9029
Updated jasper packages fix security vulnerability: Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, which could lead to denial of service application crash or the execution of arbitrary code CVE-2014-9029...
[SECURITY] [DSA 3089-1] jasper security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3089-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso December 04, 2014 http://www.debian.org/security/faq -...
