Advisories » MGASA-2014-0514

Updated jasper packages fix CVE-2014-9029

Publication date: 05 Dec 2014
Modification date: 05 Dec 2014
Type: security
Affected Mageia releases : 4
CVE: CVE-2014-9029

Description

Updated jasper packages fix security vulnerability:

Josh Duart of the Google Security Team discovered heap-based buffer overflow
flaws in JasPer, which could lead to denial of service (application crash) or
the execution of arbitrary code (CVE-2014-9029).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=14729
• https://www.debian.org/security/2014/dsa-3089
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9029

SRPMS

4/core

• jasper-1.900.1-15.1.mga4