File _patchinfo of Package patchinfo.10809

<patchinfo incident="10809">
  <issue tracker="bnc" id="1117511">VUL-1: CVE-2018-19539: jasper: An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service.</issue>
  <issue tracker="bnc" id="1117505">VUL-1: CVE-2018-19542: jasper: An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.</issue>
  <issue tracker="bnc" id="1010783">VUL-1: CVE-2016-9396: jasper: Assert failed in jpc_t1cod.c:144: int JPC_NOMINALGAIN</issue>
  <issue tracker="cve" id="2016-9396"/>
  <issue tracker="cve" id="2018-19539"/>
  <issue tracker="cve" id="2018-19542"/>
  <packager>mvetter</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for jasper</summary>
  <description>This update for jasper fixes the following issues:

Security issues fixed:

- CVE-2018-19542: Fixed a denial of service in jp2_decode (bsc#1117505).
- CVE-2018-19539: Fixed a denial of service in jas_image_readcmpt (bsc#1117511).
- CVE-2016-9396: Fixed a denial of service in jpc_cox_getcompparms (bsc#1010783).
</description>
</patchinfo>