[SECURITY] Fedora 21 Update: mingw-jasper-1.900.1-24.fc21

MinGW Windows Jasper library...

[SECURITY] Fedora 20 Update: mingw-jasper-1.900.1-24.fc20

MinGW Windows Jasper library...

[SECURITY] Fedora 19 Update: mingw-jasper-1.900.1-24.fc19

MinGW Windows Jasper library...

Fedora 20 : mingw-jasper-1.900.1-24.fc20 (2014-17027)

Add patches for all current CVEs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

Fedora 19 : mingw-jasper-1.900.1-24.fc19 (2014-17032)

Add patches for all current CVEs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

Fedora Update for mingw-jasper FEDORA-2014-17027

Check the version of mingw-jasper SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868613";...

Fedora Update for mingw-jasper FEDORA-2014-17032

Check the version of mingw-jasper SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868612";...

Fedora 21 : mingw-jasper-1.900.1-24.fc21 (2014-16961)

Add patches for all current CVEs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

openSUSE Security Update : jasper (openSUSE-SU-2014:1644-1)

jasper was updated to fix one security issue. This security issue was fixed : - Heap overflows in libjasper CVE-2014-9029. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-781. Th...

Mandriva Linux Security Advisory : jasper (MDVSA-2014:247)

Updated jasper packages fix security vulnerability : Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, which could lead to denial of service application crash or the execution of arbitrary code CVE-2014-9029. %NASLMINLEVEL 70300 C Tenable Network...

jasper -- multiple vulnerabilities

oCERT reports: The library is affected by a double-free vulnerability in function jasiccattrvaldestroy as well as a heap-based buffer overflow in function jp2decode. A specially crafted jp2 file can be used to trigger the vulnerabilities. oCERT reports: The library is affected by an off-by-one...

Ubuntu 14.04 LTS : JasPer vulnerability (USN-2434-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2434-1 advisory. Jose Duart discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000...

Ubuntu 10.04 LTS : ghostscript vulnerability (USN-2434-2)

USN-2434-1 fixed a vulnerability in JasPer. This update provides the corresponding fix for the JasPer library embedded in the Ghostscript package. Jose Duart discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted...

CVE-2014-9029

Multiple off-by-one errors in the 1 jpcdeccpsetfromcox and 2 jpcdeccpsetfromrgn functions in jpc/jpcdec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow...

Heap overflow

Multiple off-by-one errors in the 1 jpcdeccpsetfromcox and 2 jpcdeccpsetfromrgn functions in jpc/jpcdec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow...

CVE-2014-9029

Multiple off-by-one errors in the 1 jpcdeccpsetfromcox and 2 jpcdeccpsetfromrgn functions in jpc/jpcdec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file, which triggers a heap-based buffer overflow...

CVE-2014-9029

CVE-2014-9029 affects JasPer 1.900.1 and earlier; multiple off-by-one/heap-based overflow in jpc_dec_cp_setfromcox and jpc_dec_cp_setfromrgn (and related JP2 decoding paths) could allow remote code execution via a crafted JPEG 2000 file. Public advisories report patched releases; mitigate by upgr...

USN-2434-2: Ghostscript vulnerability

USN-2434-1 fixed a vulnerability in JasPer. This update provides the corresponding fix for the JasPer library embedded in the Ghostscript package. Original advisory details: Jose Duart discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into...

USN-2434-1: JasPer vulnerability

Jose Duart discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges...

USN-2434-1 jasper vulnerability

Jose Duart discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges...