jasper - security update

Fixed packages 1

Vulnerabilities 8

• Medium 6.5
  CVE-2018-20622

  JasPer 2.0.14 has a memory leak in base/jas_malloc.c in libjasper.a when "--output-format jp2" is used.

  jasper Ubuntu
  Dec 31, 2018
• Unscored —
  CVE-2018-18873

  An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function ras_putdatastd in ras/ras…

  jasper Ubuntu
  Oct 31, 2018
• Unscored —
  CVE-2018-19539

  An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/…

  jasper Ubuntu
  Nov 26, 2018
• Unscored —
  CVE-2018-19540

  An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.1…

  jasper Ubuntu
  Nov 26, 2018
• Unscored —
  CVE-2018-19541

  An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.1…

  jasper Ubuntu
  Nov 26, 2018
• Unscored —
  CVE-2018-19542

  An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/j…

  jasper Ubuntu
  Nov 26, 2018
• Unscored —
  CVE-2018-20570

  jp2_encode in jp2/jp2_enc.c in JasPer 2.0.14 has a heap-based buffer over-read.

  jasper Ubuntu
  Dec 28, 2018
• Unscored —
  CVE-2018-20584

  JasPer 2.0.14 allows remote attackers to cause a denial of service (application hang) via an attempted conversion to th…

  jasper Ubuntu
  Dec 30, 2018