Lucene search

K
suseSuseSUSE-SU-2017:0084-1
HistoryJan 08, 2017 - 5:07 p.m.

Security update for jasper (important)

2017-01-0817:07:30
lists.opensuse.org
39

0.022 Low

EPSS

Percentile

88.3%

This update for jasper fixes the following issues:

  • CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec.
    (bsc#1012530)
  • CVE-2016-9395: Invalid jasper files could lead to abort of the library
    caused by attacker provided image. (bsc#1010977)
  • CVE-2016-9398: Invalid jasper files could lead to abort of the library
    caused by attacker provided image. (bsc#1010979)
  • CVE-2016-9560: Stack-based buffer overflow in jpc_tsfb_getbands2.
    (bsc#1011830)
  • CVE-2016-9591: Use-after-free on heap in jas_matrix_destroy.
    (bsc#1015993)