Format: 1.8
Date: Thu, 22 Jan 2015 12:49:54 -0500
Source: jasper
Binary: libjasper1 libjasper-dev libjasper-runtime
Architecture: amd64
Version: 1.900.1-debian1-2ubuntu0.2
Distribution: utopic
Urgency: medium
Maintainer: Ubuntu/amd64 Build Daemon <buildd@akateko.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libjasper-dev - Development files for the JasPer JPEG-2000 library
 libjasper-runtime - Programs for manipulating JPEG-2000 files
 libjasper1 - JasPer JPEG-2000 runtime library
Changes:
 jasper (1.900.1-debian1-2ubuntu0.2) utopic-security; urgency=medium
 .
   * SECURITY UPDATE: denial of service via crafted ICC color profile
     - debian/patches/05-CVE-2014-8137.patch: prevent double-free in
       src/libjasper/base/jas_icc.c, remove assert in
       src/libjasper/jp2/jp2_dec.c.
     - CVE-2014-8137
   * SECURITY UPDATE: denial of service or code execution via invalid
     channel number
     - debian/patches/06-CVE-2014-8138.patch: validate channel number in
       src/libjasper/jp2/jp2_dec.c.
     - CVE-2014-8138
   * SECURITY UPDATE: denial of service or code execution via off-by-one
     - debian/patches/07-CVE-2014-8157.patch: fix off-by-one in
       src/libjasper/jpc/jpc_dec.c.
     - CVE-2014-8157
   * SECURITY UPDATE: denial of service or code execution via memory
     corruption
     - debian/patches/08-CVE-2014-8158.patch: remove HAVE_VLA to use more
       sensible buffer sizes in src/libjasper/jpc/jpc_qmfb.c.
     - CVE-2014-8158
Checksums-Sha1:
 e2eb1a6f34c23b6f84c838b69e26246131de622c 130800 libjasper1_1.900.1-debian1-2ubuntu0.2_amd64.deb
 28790aa073a48b3441beac4d351575151e5e75af 521320 libjasper-dev_1.900.1-debian1-2ubuntu0.2_amd64.deb
 62edad938ae0b63f4f714a27f8de7187797a6118 20286 libjasper-runtime_1.900.1-debian1-2ubuntu0.2_amd64.deb
Checksums-Sha256:
 7d98e42f7aabbef6bc4b5dfd38af8eb9d469f09b7ca67c0f8fb67499827ae91c 130800 libjasper1_1.900.1-debian1-2ubuntu0.2_amd64.deb
 67f4f4256d8b6ae1f8a1e37ac0ebac6ad5c2e58bfd81561046c47f7df0909197 521320 libjasper-dev_1.900.1-debian1-2ubuntu0.2_amd64.deb
 95e70a68824fe7636c08c6523377ce3c4b4d7384b2a3a6bb1db1402b37761dae 20286 libjasper-runtime_1.900.1-debian1-2ubuntu0.2_amd64.deb
Files:
 c092668abd095cb9cf717352358e5226 130800 libs optional libjasper1_1.900.1-debian1-2ubuntu0.2_amd64.deb
 83d93a1851bc7e8d161a5b3231d33617 521320 libdevel optional libjasper-dev_1.900.1-debian1-2ubuntu0.2_amd64.deb
 e9c7d29fb81a0d309c74d21f2cee8357 20286 graphics optional libjasper-runtime_1.900.1-debian1-2ubuntu0.2_amd64.deb
Original-Maintainer: Roland Stigge <stigge@antcom.de>