File _patchinfo of Package patchinfo.10810

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.10810

<patchinfo incident="10810">
  <issue tracker="bnc" id="1117507">VUL-1: CVE-2018-19541: jasper: heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c</issue>
  <issue tracker="bnc" id="1117508">VUL-0: CVE-2018-19540: jasper: heap-based buffer overflow of size 1 in the function jas_icctxtdesc_input in libjasper/base/jas_icc.c</issue>
  <issue tracker="bnc" id="1117511">VUL-1: CVE-2018-19539: jasper: An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service.</issue>
  <issue tracker="bnc" id="1117505">VUL-1: CVE-2018-19542: jasper: An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.</issue>
  <issue tracker="bnc" id="1010783">VUL-1: CVE-2016-9396: jasper: Assert failed in jpc_t1cod.c:144: int JPC_NOMINALGAIN</issue>
  <issue tracker="cve" id="2018-19541"/>
  <issue tracker="cve" id="2018-19540"/>  
  <issue tracker="cve" id="2016-9396"/>
  <issue tracker="cve" id="2018-19539"/>
  <issue tracker="cve" id="2018-19542"/>
  <packager>mvetter</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for jasper</summary>
  <description>This update for jasper fixes the following issues:

Security issues fixed:

- CVE-2018-19540: Fixed  a heap based overflow in jas_icctxtdesc_input (bsc#1117508).
- CVE-2018-19541: Fix heap based overread in jas_image_depalettize (bsc#1117507).
- CVE-2018-19542: Fixed a denial of service in jp2_decode (bsc#1117505).
- CVE-2018-19539: Fixed a denial of service in jas_image_readcmpt (bsc#1117511).
- CVE-2016-9396: Fixed a denial of service in jpc_cox_getcompparms (bsc#1010783).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.10810

Places