Stay Secure with the Latest Linux Advisories

security advisorymoderatesecurity issue

Fedora 32: FEDORA-2021-0a6290f865 Moderate: Jasper 2.0.24 Update

New upstream version 2.0.24 with all reported CVE fixes available.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-0a6290f865 2021-02-03 01:17:44.437198 --------------------------------------------------------------------------------Name : jasper Product : Fedora 32 Version : 2.0.24 Release : 1.fc32 URL : https://www.ece.uvic.ca/~frodo/jasper/ Summary : Implementation of the JPEG-2000 standard, Part 1 Description : This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats. --------------------------------------------------------------------------------Update Information: New upstream version 2.0.24 with all reported CVE fixes available. --------------------------------------------------------------------------------ChangeLog: * Mon Jan 25 2021 Josef Ridky - 2.0.24-1 - New upstream release 2.0.24 (#1905690) --------------------------------------------------------------------------------References: [ 1 ] Bug #1434464 - CVE-2016-9396 CVE-2016-9397 CVE-2016-9398 CVE-2016-9399 CVE-2017-1000050 CVE-2017-13745 CVE-2017-13746 CVE-2017-13747 CVE-2017-13748 CVE-2017-13749 CVE-2017-13750 CVE-2017-13751 CVE-2017-13752 CVE-2017-14132 ... jasper: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1434464 [ 2 ] Bug #1905202 - CVE-2020-27828 jasper: heap-based buffer overflow in cp_create() in jpc_enc.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1905202 [ 3 ] Bug #1905690 - jasper-2.0.24 is available https://bugzilla.redhat.com/show_bug.cgi?id=1905690 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-0a6290f865' at the command line. For more information, refer to the dnf documentationavailable at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Jasper 2.0.24 launched for Fedora 32, featuring essential CVE patches to boost security and reliability. Update today!. Jasper Update,Fedora Security,Image Compression,Update Notification. . LinuxSecurity.com Team

Feb 02, 2021 Fedora