SUSE-SU-2016:2776-1 Security update for jasper

This update for jasper fixes the following issues: Security fixes: - CVE-2016-8887: NULL pointer dereference in jp2colrdestroy jp2cod.c bsc1006836 - CVE-2016-8886: memory allocation failure in jasmalloc jasmalloc.c bsc1006599 - CVE-2016-8884,CVE-2016-8885: two null pointer dereferences in...

SUSE-SU-2016:2775-1 Security update for jasper

This update for jasper to version 1.900.14 fixes several issues. These security issues were fixed: - CVE-2016-8887: NULL pointer dereference in jp2colrdestroy jp2cod.c bsc1006836 - CVE-2016-8886: memory allocation failure in jasmalloc jasmalloc.c bsc1006599 - CVE-2016-8884,CVE-2016-8885: two null...

[SECURITY] Fedora 23 Update: jasper-1.900.13-1.fc23

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

CVE-2016-9262

Multiple integer overflows in the 1 jasrealloc function in base/jasmalloc.c and 2 memresize function in base/jasstream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of service via a crafted image, which triggers use after free vulnerabilities...

[SECURITY] Fedora 24 Update: jasper-1.900.13-1.fc24

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats...

PT-2017-9740

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.4 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted YRsiz value in a BMP image to the imginfo command. This occur...

PT-2017-9857

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.11 Description The issue is related to the jas malloc function in libjasper/base/jas malloc.c, which can be triggered by a crafted file, leading to a memory allocation failure. This can allow remote attackers to...

PT-2017-9739

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.4 Description The issue allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash. This can be achieved by providing a crafted XRsiz value in a BMP image to t...

Fedora 24 : jasper (2016-e0f0d48142)

The remote Fedora 24 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2016-e0f0d48142 advisory. This update contains security fix for CVE-2016-8883, CVE-2016-8882, CVE-2016-8881, CVE-2016-8880, CVE-2016-8884, CVE-2016-8885, CVE-2016-8887,...

PT-2017-9858

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.10 Description The issue allows remote attackers to cause a denial of service due to a NULL pointer dereference in the jp2 colr destroy function. Recommendations For versions prior to 1.900.10, update to version...

PT-2017-9738

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.5 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted BMP image in an imginfo command. This is due to a problem in the bmp getda...

PT-2017-9852

Name of the Vulnerable Software and Affected Versions jasper package affected versions not specified Description The jasper package has been updated and patched to fix several security issues. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2017-9856

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.9 Description The issue allows remote attackers to cause a denial of service by calling the imginfo command with a crafted BMP image, resulting in a NULL pointer dereference in the bmp getdata function...

PT-2017-9851

Name of the Vulnerable Software and Affected Versions jasper package affected versions not specified Description The jasper package has been updated and patched to fix several security issues. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2017-9854

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.8 Description The issue allows remote attackers to cause a denial of service via a crafted file. This is due to a problem in the jpc dec tiledecode function in jpc dec.c. Recommendations For versions prior to...

PT-2017-9853

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.8 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, via a crafted file. This is due to a NULL pointer dereference in the jpc dec tilefini function. Recommendations...

PT-2017-9855

Name of the Vulnerable Software and Affected Versions JasPer version 1.900.5 Description The issue allows remote attackers to cause a denial of service by calling the imginfo command with a crafted BMP image, resulting in a NULL pointer dereference. This is due to an incomplete fix for a previous...

PT-2017-9741

Name of the Vulnerable Software and Affected Versions JasPer versions prior to 1.900.10 Description A double free vulnerability exists in the mem close function in jas stream.c, which can be exploited by remote attackers through a crafted BMP image to the imginfo command, potentially causing a...

openSUSE Security Update : jasper (openSUSE-2016-1263)

This update for jasper to version 1.900.14 fixes several issues. These security issues were fixed : - CVE-2008-3522: Buffer overflow in the jasstreamprintf function in libjasper/base/jasstream.c in JasPer might have allowed context-dependent attackers to have an unknown impact via vectors related...

openSUSE Security Update : jasper (openSUSE-2016-1270)

This update for jasper to version 1.900.14 fixes several issues. These security issues were fixed : - CVE-2008-3522: Buffer overflow in the jasstreamprintf function in libjasper/base/jasstream.c in JasPer might have allowed context-dependent attackers to have an unknown impact via vectors related...