jasper-1.900.1-15.AXS4.1

エラータID: AXSA:2012-340:01

Release date: 
Tuesday, March 13, 2012 - 11:29
Subject: 
jasper-1.900.1-15.AXS4.1
Affected Channels: 
Asianux Server 4 for x86
Asianux Server 4 for x86_64
Severity: 
High
Description: 

This package contains an implementation of the image compression standard JPEG-2000, Part 1. It consists of tools for conversion to and from the JP2 and JPC formats.
Security issues fixed with this release:
CVE-2011-4516
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a JPEG2000 file.
CVE-2011-4517
The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a malformed JPEG2000 file.

Solution: 

Update packages.

CVEs: 
CVE-2011-4516
Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.
CVE-2011-4517
The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a crafted component registration (CRG) marker segment in a JPEG2000 file.
Additional Info: 

N/A

Download: 

SRPMS
  1. jasper-1.900.1-15.AXS4.1.src.rpm
    MD5: 11a62b5808b26e760407b5556d57b23d
    SHA-256: 3c06d94a6996e38f8ad0fd20efce338179f1a5b65d33101df98914253545a47b
    Size: 1.33 MB

Asianux Server 4 for x86
  1. jasper-1.900.1-15.AXS4.1.i686.rpm
    MD5: f300476a130a148cd065bb8c90c97010
    SHA-256: 904a8832d4803aa0101110e125d57870ac03594189802d1441972371bdc3a9a0
    Size: 20.52 kB
  2. jasper-libs-1.900.1-15.AXS4.1.i686.rpm
    MD5: 9755912e5268348d767a8c2b3bbdab99
    SHA-256: 4231a1ab713b2f4d368d0bebfd3842007be0126260b6751b792a07dddead8990
    Size: 135.59 kB

Asianux Server 4 for x86_64
  1. jasper-1.900.1-15.AXS4.1.x86_64.rpm
    MD5: 8e09b6736dc8ba816e3b375dde67ae02
    SHA-256: 46d3c021b4c34ee40cbff9ac4790ad9493bb8e2ed43e82c5e473aa04b4051d9d
    Size: 20.44 kB
  2. jasper-libs-1.900.1-15.AXS4.1.x86_64.rpm
    MD5: 4c9197eaecf56ecccfa96a9abc75a895
    SHA-256: 14435d0ed1818cfbcc4601ebf3560e625c5913fda2d6214e5dbe846b9d70b4a4
    Size: 135.41 kB
  3. jasper-libs-1.900.1-15.AXS4.1.i686.rpm
    MD5: 9755912e5268348d767a8c2b3bbdab99
    SHA-256: 4231a1ab713b2f4d368d0bebfd3842007be0126260b6751b792a07dddead8990
    Size: 135.59 kB