Ubuntu
jasper package

Branches for Intrepid

Name Status Last Modified Last Commit
lp:ubuntu/intrepid/jasper 1 Development 2009-06-27 03:55:24 UTC
6. * Added GeoJP2 patch by Sven Geggus <...

Author: Roland Stigge
Revision Date: 2008-06-08 13:14:24 UTC

* Added GeoJP2 patch by Sven Geggus <sven.geggus@iitb.fraunhofer.de>
  (Closes: #275619)
* debian/control: Standards-Version: 3.8.0
lp:ubuntu/intrepid-security/jasper 1 Development 2009-06-27 03:55:29 UTC
7. * SECURITY UPDATE: integer overflows ...

Author: Marc Deslauriers
Revision Date: 2009-03-18 11:03:55 UTC

* SECURITY UPDATE: integer overflows via integer multiplication for
  memory allocation
  - debian/patches/02_security_CVE-2008-3520-3521-3522.dpatch: introduce
    new size-checked allocation functions, and use them everywhere.
  - CVE-2008-3520
* SECURITY UPDATE: denial of service via temporary file name prediction
  - debian/patches/02_security_CVE-2008-3520-3521-3522.dpatch: use
    mkstemp() in src/libjasper/base/jas_stream.c.
  - CVE-2008-3521
* SECURITY UPDATE: buffer overflow via vsprintf in jas_stream_printf()
  - debian/patches/02_security_CVE-2008-3520-3521-3522.dpatch: use
    vsnprintf() in src/libjasper/base/jas_stream.c.
  - CVE-2008-3522
lp:ubuntu/intrepid-updates/jasper 1 Development 2009-06-27 03:55:33 UTC
7. * SECURITY UPDATE: integer overflows ...

Author: Marc Deslauriers
Revision Date: 2009-03-18 11:03:55 UTC

* SECURITY UPDATE: integer overflows via integer multiplication for
  memory allocation
  - debian/patches/02_security_CVE-2008-3520-3521-3522.dpatch: introduce
    new size-checked allocation functions, and use them everywhere.
  - CVE-2008-3520
* SECURITY UPDATE: denial of service via temporary file name prediction
  - debian/patches/02_security_CVE-2008-3520-3521-3522.dpatch: use
    mkstemp() in src/libjasper/base/jas_stream.c.
  - CVE-2008-3521
* SECURITY UPDATE: buffer overflow via vsprintf in jas_stream_printf()
  - debian/patches/02_security_CVE-2008-3520-3521-3522.dpatch: use
    vsnprintf() in src/libjasper/base/jas_stream.c.
  - CVE-2008-3522
1 → 3 of 3 results First • Previous • Next • Last