Red Hat Security AdvisoryRHSA-2015:0074
jasper security update
Released 2015-01-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) jasper-1.900.1-26.el7_0.3, jasper-libs-1.900.1-26.el7_0.3
- Red Hat Enterprise Linux Client Optional (v. 7) jasper-1.900.1-26.el7_0.3, jasper-devel-1.900.1-26.el7_0.3, jasper-utils-1.900.1-26.el7_0.3
- Red Hat Enterprise Linux ComputeNode (v. 7) jasper-1.900.1-26.el7_0.3, jasper-libs-1.900.1-26.el7_0.3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) jasper-1.900.1-26.el7_0.3, jasper-devel-1.900.1-26.el7_0.3, jasper-utils-1.900.1-26.el7_0.3
- Red Hat Enterprise Linux Desktop (v. 6) jasper-1.900.1-16.el6_6.3, jasper-libs-1.900.1-16.el6_6.3
- Red Hat Enterprise Linux Desktop Optional (v. 6) jasper-devel-1.900.1-16.el6_6.3, jasper-utils-1.900.1-16.el6_6.3
- Red Hat Enterprise Linux HPC Node (v. 6) jasper-1.900.1-16.el6_6.3, jasper-libs-1.900.1-16.el6_6.3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) jasper-1.900.1-16.el6_6.3, jasper-devel-1.900.1-16.el6_6.3, jasper-utils-1.900.1-16.el6_6.3
- Red Hat Enterprise Linux Server (v. 6) jasper-1.900.1-16.el6_6.3, jasper-libs-1.900.1-16.el6_6.3, jasper-libs-1.900.1-16.el6_6.3.ppc
- Red Hat Enterprise Linux Server (v. 7) jasper-1.900.1-26.el7_0.3, jasper-libs-1.900.1-26.el7_0.3, jasper-libs-1.900.1-26.el7_0.3.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) jasper-devel-1.900.1-16.el6_6.3, jasper-devel-1.900.1-16.el6_6.3.ppc, jasper-utils-1.900.1-16.el6_6.3
- Red Hat Enterprise Linux Server Optional (v. 7) jasper-1.900.1-26.el7_0.3, jasper-devel-1.900.1-26.el7_0.3, jasper-devel-1.900.1-26.el7_0.3.ppc +1
- Red Hat Enterprise Linux Workstation (v. 6) jasper-1.900.1-16.el6_6.3, jasper-libs-1.900.1-16.el6_6.3
- Red Hat Enterprise Linux Workstation (v. 7) jasper-1.900.1-26.el7_0.3, jasper-libs-1.900.1-26.el7_0.3
- Red Hat Enterprise Linux Workstation Optional (v. 6) jasper-devel-1.900.1-16.el6_6.3, jasper-utils-1.900.1-16.el6_6.3
- Red Hat Enterprise Linux Workstation Optional (v. 7) jasper-1.900.1-26.el7_0.3, jasper-devel-1.900.1-26.el7_0.3, jasper-utils-1.900.1-26.el7_0.3
Fixes 2 records
Priority MEDIUM 50
Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image, which trig…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.16855 · Published 2015-01-26 · Partial fix CWE-189
Priority MEDIUM 45
Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 image.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.14447 · Published 2015-01-26 · Fixed CWE-119
