FEDORA-EPEL-2014-4757 — security update for mingw-jasper

stable

mingw-jasper-1.900.1-25.el7

FEDORA-EPEL-2014-4757 created by mooninite 8 years ago for Fedora EPEL 7

Fixes for CVE-2014-8137 and CVE-2014-8138
Bring package up to date with all CVE fixes

This update has been submitted for testing by mooninite.

8 years ago

This update is currently being pushed to the Fedora EPEL 7 testing updates repository.

8 years ago

This update has been pushed to testing

8 years ago

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

8 years ago

This update has been submitted for stable by mooninite.

8 years ago

This update is currently being pushed to the Fedora EPEL 7 stable updates repository.

8 years ago

This update has been pushed to stable

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

mingw-jasper-1.900.1-25.el7

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

modified

8 years ago

BZ#1170655 CVE-2014-9029 mingw-jasper: jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009) [epel-7]

BZ#1173157 CVE-2014-8137 jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012)

BZ#1173162 CVE-2014-8138 jasper: heap overflow in jp2_decode() (oCERT-2014-012)

BZ#1175764 CVE-2014-8138 CVE-2014-8137 mingw-jasper: various flaws [epel-7]

mingw-jasper-1.900.1-25.el7

Automated Test Results

None