MGASA-2019-0167

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2019-0167.html

Import Source

https://advisories.mageia.org/MGASA-2019-0167.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2019-0167

Related

CVE-2016-9398
CVE-2018-19539
CVE-2018-19542

Published

2019-05-12T09:35:33Z

Modified

2019-05-12T09:02:01Z

Summary

Updated jasper packages fix security vulnerabilities

Details

Updated jasper packages fix security vulnerabilities:

The jpcfloorlog2 function in jpcmath.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure) via unspecified vectors (CVE-2016-9398).

A denial of service in jp2_decode (CVE-2018-19542).

A denial of service in jasimagereadcmpt (CVE-2018-19539).

References

https://advisories.mageia.org/MGASA-2019-0167.html
https://bugs.mageia.org/show_bug.cgi?id=24760
https://lists.opensuse.org/opensuse-updates/2019-05/msg00017.html

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

MGASA-2019-0167

Affected packages