MDVSA-2015:012: jasper

Updated jasper packages fix security vulnerabilities:

A double free flaw was found in the way JasPer parsed ICC color
profiles in JPEG 2000 image files. A specially crafted file could
cause an application using JasPer to crash or, possibly, execute
arbitrary code (CVE-2014-8137).

A heap-based buffer overflow flaw was found in the way JasPer
decoded JPEG 2000 image files. A specially crafted file could cause
an application using JasPer to crash or, possibly, execute arbitrary
code (CVE-2014-8138).

Leave a Reply