SUSE Enterprise: 2011:1317-2 Important: Jasper Heap Overflow

   SUSE Security Update: Security update for jasper
______________________________________________________________________________

Announcement ID:    SUSE-SU-2011:1317-2
Rating:             important
References:         #725758 
Cross-References:   CVE-2011-4516 CVE-2011-4517
Affected Products:
                    SUSE Linux Enterprise Server 10 SP4
                    SUSE Linux Enterprise Desktop 10 SP4
                    SLE SDK 10 SP4
______________________________________________________________________________

   An update that fixes two vulnerabilities is now available.

Description:


   The following bug has been fixed:

   * Specially crafted JPEG2000 files could have caused a
   heap buffer overflow in jasper (CVE-2011-4516,
   CVE-2011-4517)

   Security Issues:

   * CVE-2011-4516
   
   * CVE-2011-4517
   



Package List:

   - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64):

      jasper-1.701.0-16.15.1
      libjasper-1.701.0-16.15.1

   - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64):

      libjasper-32bit-1.701.0-16.15.1

   - SUSE Linux Enterprise Server 10 SP4 (ia64):

      libjasper-x86-1.701.0-16.15.1

   - SUSE Linux Enterprise Server 10 SP4 (ppc):

      libjasper-64bit-1.701.0-16.15.1

   - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64):

      libjasper-1.701.0-16.15.1

   - SUSE Linux Enterprise Desktop 10 SP4 (x86_64):

      libjasper-32bit-1.701.0-16.15.1

   - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64):

      jasper-1.701.0-16.15.1


References:

   https://www.suse.com/security/cve/CVE-2011-4516.html
   https://www.suse.com/security/cve/CVE-2011-4517.html
   https://login.microfocus.com/nidp/app/login?sid=0
   https://login.microfocus.com/nidp/app/login?sid=0