Skip to content
OpenAdvisories
Low ELSA-2018-3253 2 CVEs

Low: jasper security update (Oracle Linux 7)

Published Nov 5, 2018 · Updated Nov 5, 2018

Ecosystem: Oracle Linux

Summary

[1.900.1-33]
- remove implicit declaration of jas_eprintf (#1585830)

[1.900.1-32]
- Fix CVE-2016-9396 (#1583721)
- Fix CVE-2017-1000050 (#1585830)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 jasper 0:1.900.1-33.el7
Oracle Linux · 7 jasper-devel 0:1.900.1-33.el7
Oracle Linux · 7 jasper-libs 0:1.900.1-33.el7
Oracle Linux · 7 jasper-utils 0:1.900.1-33.el7

Vulnerabilities 2

  • Unscored —
    CVE-2016-9396

    The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of s…

    jasper Ubuntu
  • Unscored —
    CVE-2017-1000050

    JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the …

    jasper jasper Ubuntu Alpine