SUSE-SU-2020:2690-1 Security update for jasper

This update for jasper fixes the following issues: - CVE-2016-9398: Improved patch for already fixed issue bsc1010979. - CVE-2016-9399: Fix assert in calcstepsizes bsc1010980. - CVE-2016-9397: Fix assert in jpcdequantize bsc1010786. - CVE-2016-9557: Fix signed integer overflow bsc1011829. -...

SUSE-SU-2020:2689-1 Security update for jasper

This update for jasper fixes the following issues: - CVE-2016-9398: Improved patch for already fixed issue bsc1010979. - CVE-2016-9399: Fix assert in calcstepsizes bsc1010980. - CVE-2017-5499: Validate component depth bit bsc1020451. - CVE-2017-5503: Check bounds in jasseq2dbindsub bsc1020456. -...

FreeBSD : jasper -- multiple vulnerabilities (6842ac7e-d250-11ea-b9b7-08002728f74c)

JasPer NEWS : - Fix CVE-2018-9154 - Fix CVE-2018-19541 - Fix CVE-2016-9399, CVE-2017-13751 - Fix CVE-2018-19540 - Fix CVE-2018-9055 - Fix CVE-2017-13748 - Fix CVE-2017-5503, CVE-2017-5504, CVE-2017-5505 - Fix CVE-2018-9252 - Fix CVE-2018-19139 - Fix CVE-2018-19543, CVE-2017-9782 - Fix...

Updated jasper packages fix security vulnerabilities

The jasmatrixbindsub function in jasseq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service invalid read via a crafted image CVE-2017-6851. Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified...

MGASA-2020-0337 Updated jasper packages fix security vulnerabilities

The jasmatrixbindsub function in jasseq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service invalid read via a crafted image CVE-2017-6851. Heap-based buffer overflow in the jpcdecdecodepkt function in jpct2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified...

jasper -- multiple vulnerabilities

JasPer NEWS: - Fix CVE-2018-9154 - Fix CVE-2018-19541 - Fix CVE-2016-9399, CVE-2017-13751 - Fix CVE-2018-19540 - Fix CVE-2018-9055 - Fix CVE-2017-13748 - Fix CVE-2017-5503, CVE-2017-5504, CVE-2017-5505 - Fix CVE-2018-9252 - Fix CVE-2018-19139 - Fix CVE-2018-19543, CVE-2017-9782 - Fix CVE-2018-205...

Security Bulletin: Multiple vulnerabilities in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util affect IBM SmartCloud Entry

Summary Multiple vulnerabilities have been identified in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util. coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util shipped with IBM SmartCloud Entry Appliance. IBM SmartCloud Entry Appliance has addressed the vulnerabilities...

SUSE SLED15 / SLES15 Security Update : jasper (SUSE-SU-2020:1420-2)

This update for jasper fixes the following issues : CVE-2018-9154: Fixed a potential denial of service in jpcdecprocesssot bsc1092115. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE-SU-2020:1420-2 Security update for jasper

This update for jasper fixes the following issues: - CVE-2018-9154: Fixed a potential denial of service in jpcdecprocesssot bsc1092115...

SUSE SLED15 / SLES15 Security Update : jasper (SUSE-SU-2020:1420-1)

This update for jasper fixes the following issues : CVE-2018-9154: Fixed a potential denial of service in jpcdecprocesssot bsc1092115. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

ai.idylnlp:idylnlp-models-deeplearning (>=1.0.0 <=1.1.0), ai.platon.pulsar:pulsar-agentic (>=4.5.0 <=4.6.0) +5848 more potentially affected by CVE-2012-0881 via xerces:xercesImpl (>=2.10.0 <=2.11.0)

xerces:xercesImpl MAVEN version =2.10.0, =1.0.0, =4.5.0, =4.7.11, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.7.0, =4.5.0, =4.5.0, =4.5.0, =0.2, =5.0.9, =5.1.3 and more Source cves: CVE-2012-0881 Source advisory: OSV:GHSA-VMQM-G3VH-847M...

openSUSE Security Update : jasper (openSUSE-2020-734)

This update for jasper fixes the following issues : - CVE-2018-9154: Fixed a potential denial of service in jpcdecprocesssot bsc1092115. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

openSUSE: Security Advisory for jasper (openSUSE-SU-2020:0734-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Updated jasper packages fix security vulnerability

Updated jasper packages fix security vulnerability: There is a reachable abort in the function jpcdecprocesssot in libjasper/jpc/jpcdec.c of JasPer 2.0.14 that will lead to a remote denial of service attack CVE-2018-9154...

MGASA-2020-0241 Updated jasper packages fix security vulnerability

Updated jasper packages fix security vulnerability: There is a reachable abort in the function jpcdecprocesssot in libjasper/jpc/jpcdec.c of JasPer 2.0.14 that will lead to a remote denial of service attack CVE-2018-9154...

OPENSUSE-SU-2020:0734-1 Security update for jasper

This update for jasper fixes the following issues: - CVE-2018-9154: Fixed a potential denial of service in jpcdecprocesssot bsc1092115. This update was imported from the SUSE:SLE-15:Update update project...

Security update for jasper (low)

openSUSE Security Update: Security update for jasper Announcement ID: openSUSE-SU-2020:0734-1 Rating: low References: 1092115 Cross-References: CVE-2018-9154 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for jasper fixes th...

SUSE-SU-2020:1420-1 Security update for jasper

This update for jasper fixes the following issues: - CVE-2018-9154: Fixed a potential denial of service in jpcdecprocesssot bsc1092115...

The vulnerability of the libjasper.a file, a collection of JasPer libraries, allows attackers to trigger a service failure.

The vulnerability of the libjasper.a file base/jasmalloc.c in the JasPer library set is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the jas_icctxtdesc_input function in the JasPer library allows a attacker to influence privacy, integrity, and accessibility.

The vulnerability of the jasicctxtdescinput function in the JasPer library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...