Format: 1.8
Date: Thu, 22 Jan 2015 13:00:10 -0500
Source: jasper
Binary: libjasper1 libjasper-dev libjasper-runtime
Architecture: ppc64el
Version: 1.900.1-14ubuntu3.2
Distribution: trusty
Urgency: medium
Maintainer: Ubuntu Build Daemon <buildd@fisher01.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description: 
 libjasper-dev - Development files for the JasPer JPEG-2000 library
 libjasper-runtime - Programs for manipulating JPEG-2000 files
 libjasper1 - JasPer JPEG-2000 runtime library
Changes: 
 jasper (1.900.1-14ubuntu3.2) trusty-security; urgency=medium
 .
   * SECURITY UPDATE: denial of service via crafted ICC color profile
     - debian/patches/05-CVE-2014-8137.patch: prevent double-free in
       src/libjasper/base/jas_icc.c, remove assert in
       src/libjasper/jp2/jp2_dec.c.
     - CVE-2014-8137
   * SECURITY UPDATE: denial of service or code execution via invalid
     channel number
     - debian/patches/06-CVE-2014-8138.patch: validate channel number in
       src/libjasper/jp2/jp2_dec.c.
     - CVE-2014-8138
   * SECURITY UPDATE: denial of service or code execution via off-by-one
     - debian/patches/07-CVE-2014-8157.patch: fix off-by-one in
       src/libjasper/jpc/jpc_dec.c.
     - CVE-2014-8157
   * SECURITY UPDATE: denial of service or code execution via memory
     corruption
     - debian/patches/08-CVE-2014-8158.patch: remove HAVE_VLA to use more
       sensible buffer sizes in src/libjasper/jpc/jpc_qmfb.c.
     - CVE-2014-8158
Checksums-Sha1: 
 695d7d20079d32fde168406063439bbbb53dfae4 137428 libjasper1_1.900.1-14ubuntu3.2_ppc64el.deb
 80dff8993191f4e21a8187763efd3a1ea4eb0dbb 531086 libjasper-dev_1.900.1-14ubuntu3.2_ppc64el.deb
 9e62b8c3b9673ac74dd2c6736cc8840ad3d40b2f 13734 libjasper-runtime_1.900.1-14ubuntu3.2_ppc64el.deb
Checksums-Sha256: 
 d47cef3bf9d5ba4d88b252683f5768d8004052d036a72acad771da4884f84dea 137428 libjasper1_1.900.1-14ubuntu3.2_ppc64el.deb
 112b018c855b61ddc81197008c6aab30b0bd864d0268b9bfe4bf056c7dd1d47c 531086 libjasper-dev_1.900.1-14ubuntu3.2_ppc64el.deb
 b6fed0920c7b316a7f8dec3e7ea8b303bdb8fac8f5bb524a657829ce738c4ac8 13734 libjasper-runtime_1.900.1-14ubuntu3.2_ppc64el.deb
Files: 
 53070a4f50960b00c558d15d75e1e809 137428 libs optional libjasper1_1.900.1-14ubuntu3.2_ppc64el.deb
 456dfaa61e9cb15143dc9dbb91580423 531086 libdevel optional libjasper-dev_1.900.1-14ubuntu3.2_ppc64el.deb
 d25c9c14eea7c3f9413880727dc29ffc 13734 graphics optional libjasper-runtime_1.900.1-14ubuntu3.2_ppc64el.deb
Original-Maintainer: Roland Stigge <stigge@antcom.de>