Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 454
Alerts This Week
Warning Icon 1 454

Fedora: 25 Critical Security Update for Jasper Memory Issues

fedora
Calendar Grey October 28, 2016
Dist Fedora Esm H88
A new version of Jasper has been released for Fedora 25, featuring important security updates that resolve memory vulnerabilities and additional enhancements.
New version of jasper is available (jasper-1.900.13)

Summary

This package contains an implementation of the image compression

standard JPEG-2000, Part 1. It consists of tools for conversion to and

from the JP2 and JPC formats.

Update Information:

New version of jasper is available (jasper-1.900.13). Security fix for CVE-2016-8690, CVE-2016-8691, CVE-2016-8692, CVE-2016-8693.

Topics%20covered

Topics Covered

security advisory software update Fedora security fix memory issue jasper

Change Log

References


[ 1 ] Bug #1385507 - CVE-2016-8693 jasper: Double free vulnerability in mem_close https://bugzilla.redhat.com/show_bug.cgi?id=1385507 [ 2 ] Bug #1385503 - CVE-2016-8692 jasper: Divide by zero in jpc_dec_process_siz https://bugzilla.redhat.com/show_bug.cgi?id=1385503 [ 3 ] Bug #1385502 - CVE-2016-8691 jasper: Divide by zero in jpc_dec_process_siz https://bugzilla.redhat.com/show_bug.cgi?id=1385502 [ 4 ] Bug #1385499 - CVE-2016-8690 jasper: Null pointer dereference in bmp_getdata triggered by crafted BMP image https://bugzilla.redhat.com/show_bug.cgi?id=1385499

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade jasper' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: jasper
Product: Fedora 25
Version: 1.900.13
Release: 1.fc25
URL: https://www.ece.uvic.ca/~frodo/jasper/
Summary: Implementation of the JPEG-2000 standard, Part 1

Topics%20covered

Topics Covered

security advisory software update Fedora security fix memory issue jasper

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.