Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2019:14184-1 Moderate: Jasper Denial of Service Fix

suse
Calendar Grey October 1, 2019
Dist Suse Esm H88
The patch for Jasper addresses a range of medium severity vulnerabilities found within SUSE environments.
An update that fixes 6 vulnerabilities is now available

Summary

This update for jasper fixes the following issues: Security issues fixed: - CVE-2018-19540: Fixed a heap based overflow in jas_icctxtdesc_input (bsc#1117508). - CVE-2018-19541: Fix heap based overread in jas_image_depalettize (bsc#1117507). - CVE-2018-19542: Fixed a denial of service in jp2_decode (bsc#1117505). - CVE-2018-19539: Fixed a denial of service in jas_image_readcmpt (bsc#1117511). - CVE-2018-9055: Fixed a denial of service in jpc_firstone (bsc#1087020). - CVE-2016-9396: Fixed a denial of service in jpc_cox_getcompparms (bsc#1010783). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Debuginfo 11-SP4:

Topics%20covered

Topics Covered

security advisory moderate denial of service heap overflow jasper

References

#1010783 #1087020 #1117505 #1117507 #1117508

#1117511

Cross- CVE-2016-9396 CVE-2018-19539 CVE-2018-19540

CVE-2018-19541 CVE-2018-19542 CVE-2018-9055

Affected Products:

SUSE Linux Enterprise Debuginfo 11-SP4

https://www.suse.com/security/cve/CVE-2016-9396.html

https://www.suse.com/security/cve/CVE-2018-19539.html

https://www.suse.com/security/cve/CVE-2018-19540.html

https://www.suse.com/security/cve/CVE-2018-19541.html

https://www.suse.com/security/cve/CVE-2018-19542.html

https://www.suse.com/security/cve/CVE-2018-9055.html

https://bugzilla.suse.com/1010783

https://bugzilla.suse.com/1087020

https://bugzilla.suse.com/1117505

https://bugzilla.suse.com/1117507

https://bugzilla.suse.com/1117508

Announcement ID: SUSE-SU-2019:14184-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service heap overflow jasper

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here