Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Scientific Linux: SLSA-2017:1208-1 Important: Jasper Update

Calendar May 10, 2017 • User Avatar LinuxSecurity Advisories
2 - 3 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory security issue update critical important jasper scientific linux
Important: jasper security update 
Date: Wed, 10 May 2017 13:53:42 -0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Important: jasper on SL6.x, SL7.x i386/x86_64

Synopsis: Important: jasper security update
Advisory ID: SLSA-2017:1208-1
Issue Date: 2017-05-09
CVE Numbers: CVE-2015-5203
 CVE-2015-5221
 CVE-2016-1867
 CVE-2016-2089
 CVE-2016-1577
 CVE-2016-2116
 CVE-2016-8690
 CVE-2016-8884
 CVE-2016-8885
 CVE-2016-8691
 CVE-2016-8692
 CVE-2016-8693
 CVE-2016-10249
 CVE-2016-8883
 CVE-2016-9262
 CVE-2016-9387
 CVE-2016-9388
 CVE-2016-9389
 CVE-2016-9390
 CVE-2016-9391
 CVE-2016-9392
 CVE-2016-9393
 CVE-2016-9394
 CVE-2016-9560
 CVE-2016-8654
 CVE-2016-9583
 CVE-2016-9591
 CVE-2016-9600
 CVE-2016-10248
 CVE-2016-10251
--

Security Fix(es):

Multiple flaws were found in the way JasPer decoded JPEG 2000 image files.
A specially crafted file could cause an application using JasPer to crash
or, possibly, execute arbitrary code. (CVE-2016-8654, CVE-2016-9560,
CVE-2016-10249, CVE-2015-5203, CVE-2015-5221, CVE-2016-1577,
CVE-2016-8690, CVE-2016-8693, CVE-2016-8884, CVE-2016-8885, CVE-2016-9262,
CVE-2016-9591)

Multiple flaws were found in the way JasPer decoded JPEG 2000 image files.
A specially crafted file could cause an application using JasPer to crash.
(CVE-2016-1867, CVE-2016-2089, CVE-2016-2116, CVE-2016-8691,
CVE-2016-8692, CVE-2016-8883, CVE-2016-9387, CVE-2016-9388, CVE-2016-9389,
CVE-2016-9390, CVE-2016-9391, CVE-2016-9392, CVE-2016-9393, CVE-2016-9394,
CVE-2016-9583, CVE-2016-9600, CVE-2016-10248, CVE-2016-10251)
--

SL6
 x86_64
 jasper-1.900.1-21.el6_9.x86_64.rpm
 jasper-debuginfo-1.900.1-21.el6_9.i686.rpm
 jasper-debuginfo-1.900.1-21.el6_9.x86_64.rpm
 jasper-libs-1.900.1-21.el6_9.i686.rpm
 jasper-libs-1.900.1-21.el6_9.x86_64.rpm
 jasper-devel-1.900.1-21.el6_9.i686.rpm
 jasper-devel-1.900.1-21.el6_9.x86_64.rpm
 jasper-utils-1.900.1-21.el6_9.x86_64.rpm
 i386
 jasper-1.900.1-21.el6_9.i686.rpm
 jasper-debuginfo-1.900.1-21.el6_9.i686.rpm
 jasper-libs-1.900.1-21.el6_9.i686.rpm
 jasper-devel-1.900.1-21.el6_9.i686.rpm
 jasper-utils-1.900.1-21.el6_9.i686.rpm
SL7
 x86_64
 jasper-debuginfo-1.900.1-30.el7_3.i686.rpm
 jasper-debuginfo-1.900.1-30.el7_3.x86_64.rpm
 jasper-libs-1.900.1-30.el7_3.i686.rpm
 jasper-libs-1.900.1-30.el7_3.x86_64.rpm
 jasper-1.900.1-30.el7_3.x86_64.rpm
 jasper-devel-1.900.1-30.el7_3.i686.rpm
 jasper-devel-1.900.1-30.el7_3.x86_64.rpm
 jasper-utils-1.900.1-30.el7_3.x86_64.rpm

- Scientific Linux Development Team