Format: 1.8
Date: Thu, 22 Jan 2015 13:00:10 -0500
Source: jasper
Binary: libjasper1 libjasper-dev libjasper-runtime
Architecture: i386
Version: 1.900.1-14ubuntu3.2
Distribution: trusty
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@kissel.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description: 
 libjasper-dev - Development files for the JasPer JPEG-2000 library
 libjasper-runtime - Programs for manipulating JPEG-2000 files
 libjasper1 - JasPer JPEG-2000 runtime library
Changes: 
 jasper (1.900.1-14ubuntu3.2) trusty-security; urgency=medium
 .
   * SECURITY UPDATE: denial of service via crafted ICC color profile
     - debian/patches/05-CVE-2014-8137.patch: prevent double-free in
       src/libjasper/base/jas_icc.c, remove assert in
       src/libjasper/jp2/jp2_dec.c.
     - CVE-2014-8137
   * SECURITY UPDATE: denial of service or code execution via invalid
     channel number
     - debian/patches/06-CVE-2014-8138.patch: validate channel number in
       src/libjasper/jp2/jp2_dec.c.
     - CVE-2014-8138
   * SECURITY UPDATE: denial of service or code execution via off-by-one
     - debian/patches/07-CVE-2014-8157.patch: fix off-by-one in
       src/libjasper/jpc/jpc_dec.c.
     - CVE-2014-8157
   * SECURITY UPDATE: denial of service or code execution via memory
     corruption
     - debian/patches/08-CVE-2014-8158.patch: remove HAVE_VLA to use more
       sensible buffer sizes in src/libjasper/jpc/jpc_qmfb.c.
     - CVE-2014-8158
Checksums-Sha1: 
 dc0fe494946a9fe9cf7ae303e220dee31149b8ac 126508 libjasper1_1.900.1-14ubuntu3.2_i386.deb
 a42e0114b1fd07a3d1beb65e8ddb493dd88c325c 516576 libjasper-dev_1.900.1-14ubuntu3.2_i386.deb
 af9154505f070e12ea0239bc5d7354a61db53c61 13416 libjasper-runtime_1.900.1-14ubuntu3.2_i386.deb
Checksums-Sha256: 
 d8e31baee7a604e59ac3afa9b565c7f6cfb087d021fa7a8227ac3214374471f2 126508 libjasper1_1.900.1-14ubuntu3.2_i386.deb
 e4010ab4400d14d70e689aa1e09f87dbdc0c4b6b71d23462c1c285a449be3f84 516576 libjasper-dev_1.900.1-14ubuntu3.2_i386.deb
 0ec2d5a817dc3b15c49dd93d2516c8150b0efde3279d35e554e470cc20b7f1bb 13416 libjasper-runtime_1.900.1-14ubuntu3.2_i386.deb
Files: 
 15faae3fa61f7ebeb0750452342e1c5b 126508 libs optional libjasper1_1.900.1-14ubuntu3.2_i386.deb
 28beacdc4c8a72398f276cd2fdfef514 516576 libdevel optional libjasper-dev_1.900.1-14ubuntu3.2_i386.deb
 d855c7760cebaba46d14aadc4729ce8a 13416 graphics optional libjasper-runtime_1.900.1-14ubuntu3.2_i386.deb
Original-Maintainer: Roland Stigge <stigge@antcom.de>