FEDORA-2014-16292

security update in Fedora 21 for jasper

Status: stable 4 years ago

Fixes various flaws: CVE-2014-9029, CVE-2014-8138, CVE-2014-8137

How to install

sudo dnf upgrade --advisory=FEDORA-2014-16292

Comments 16

This update has been submitted for testing by jpopelka.

Taskotron: depcheck test PASSED on i386. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/18269/steps/runtask/logs/stdio (results are informative only)

Taskotron: depcheck test PASSED on x86_64. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/18269/steps/runtask/logs/stdio (results are informative only)

This update is currently being pushed to the Fedora 21 testing updates repository.

This update has been pushed to testing

jpopelka has edited this update. New build(s): jasper-1.900.1-29.fc21. Removed build(s): jasper-1.900.1-28.fc21.

This update has been submitted for testing by jpopelka.

Taskotron: depcheck test PASSED on x86_64. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/22137/steps/runtask/logs/stdio (results are informative only)

Taskotron: depcheck test PASSED on i386. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/22144/steps/runtask/logs/stdio (results are informative only)

This update is currently being pushed to the Fedora 21 testing updates repository.

This update has been pushed to testing

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes

This update has been submitted for stable by jpopelka.

Taskotron: upgradepath test PASSED on noarch. Result log: https://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/25407/steps/runtask/logs/stdio (results are informative only)

This update is currently being pushed to the Fedora 21 stable updates repository.

This update has been pushed to stable

Add Comment & Feedback

Please login to add feedback.

Content Type
RPM
Status
stable
Test Gating
Submitted by
Update Type
security
Update Severity
unspecified
Karma
0
stable threshold: 3
unstable threshold: -3
Autopush (karma)
Disabled
Autopush (time)
Disabled
Dates
submitted 4 years ago
in testing 4 years ago
in stable 4 years ago
modified 4 years ago

Related Bugs 5

00 #1167537 CVE-2014-9029 jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009)
00 #1170650 CVE-2014-9029 jasper: incorrect component number check in COC, RGN and QCC marker segment decoders (oCERT-2014-009) [fedora-all]
00 #1173157 CVE-2014-8137 jasper: double-free in in jas_iccattrval_destroy() (oCERT-2014-012)
00 #1173162 CVE-2014-8138 jasper: heap overflow in jp2_decode() (oCERT-2014-012)
00 #1175761 CVE-2014-8138 CVE-2014-8137 jasper: various flaws [fedora-all]

Automated Test Results