Scientific Linux Security Update : jasper on SL6.x, SL7.x i386/x86_64 (20141218)

Multiple off-by-one flaws, leading to heap-based buffer overflows, were found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code. CVE-2014-9029 A heap-based buffer overflow flaw was found ...

CentOS 6 / 7 : jasper (CESA-2014:2021)

Updated jasper packages that fix three security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Debian: Security Advisory (DSA-3106-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

jasper security update

CentOS Errata and Security Advisory CESA-2014:2021 Updated jasper packages that fix three security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base score...

jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009)

Multiple off-by-one flaws, leading to heap-based buffer overflows, were found in the way JasPer decoded JPEG 2000 files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012)

A double free flaw was found in the way JasPer parsed ICC color profiles in JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

Important: Red Hat Security Advisory: jasper security update

Updated jasper packages that fix three security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

jasper: heap overflow in jp2_decode() (oCERT-2014-012)

A heap-based buffer overflow flaw was found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code...

PT-2014-8428

Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description The issue is related to a heap-based buffer overflow in the jp2 decode function, which can be triggered by a crafted JPEG 2000 file. This can cause a denial of service crash or possibly allow...

jasper security update

1.900.1-16.2 - CVE-2014-8137 - double-free in in jasiccattrvaldestroy 1173566 - CVE-2014-8138 - heap overflow in jp2decode 1173566 1.900.1-16.1 - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC marker segment decoders 1171208 1.900.1-16 - CERT VU887409: heap buffer overflow...

PT-2014-8427

Name of the Vulnerable Software and Affected Versions JasPer versions 1.900.1 and earlier Description The issue is related to a double free vulnerability in the jas iccattrval destroy function. This vulnerability allows remote attackers to cause a denial of service crash or possibly execute...

[SECURITY] Fedora 21 Update: mingw-jasper-1.900.1-24.fc21

MinGW Windows Jasper library...

[SECURITY] Fedora 20 Update: mingw-jasper-1.900.1-24.fc20

MinGW Windows Jasper library...

[SECURITY] Fedora 19 Update: mingw-jasper-1.900.1-24.fc19

MinGW Windows Jasper library...

Fedora 20 : mingw-jasper-1.900.1-24.fc20 (2014-17027)

Add patches for all current CVEs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

Fedora 19 : mingw-jasper-1.900.1-24.fc19 (2014-17032)

Add patches for all current CVEs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

Fedora 21 : mingw-jasper-1.900.1-24.fc21 (2014-16961)

Add patches for all current CVEs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

Fedora Update for mingw-jasper FEDORA-2014-17032

Check the version of mingw-jasper SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868612";...

Fedora Update for mingw-jasper FEDORA-2014-17027

Check the version of mingw-jasper SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868613";...

openSUSE Security Update : jasper (openSUSE-SU-2014:1644-1)

jasper was updated to fix one security issue. This security issue was fixed : - Heap overflows in libjasper CVE-2014-9029. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-781. Th...