Bug 37210

Summary:	jasper: Buffer overflows (4.0)
Product:	UCS	Reporter:	Moritz Muehlenhoff <jmm>
Component:	Security updates	Assignee:	Moritz Muehlenhoff <jmm>
Status:	CLOSED FIXED	QA Contact:	Janek Walkenhorst <walkenhorst>
Severity:	normal
Priority:	P3
Version:	UCS 4.0
Target Milestone:	UCS 4.0-1
Hardware:	Other
OS:	Linux
What kind of report is it?:	---	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:

Description Moritz Muehlenhoff

2014-12-05 15:25:47 CET

+++ This bug was initially created as a clone of Bug #37209 +++

Two buffer overflows in the processing of JPEG-2000 images may result in the execution of arbitrary code (CVE-2014-9029)

Comment 1 Moritz Muehlenhoff

2014-12-19 15:05:48 CET

Buffer overflow and double free in processing JPEG2000 images (CVE-2014-8137, CVE-2014-8138)

Comment 2 Moritz Muehlenhoff

2015-02-02 09:17:44 CET

Off-by-one and buffer overflows in processing JPEG2000 images (CVE-2014-8157, CVE-2014-8158)

Comment 3 Moritz Muehlenhoff

2015-02-03 11:16:05 CET

This was fixed during the import of the Wheezy 7.8 point update in Bug 37511

Comment 4 Stefan Gohmann

2015-02-11 10:58:57 CET

UCS 4.0-1 has been released:
 http://docs.univention.de/release-notes-4.0-1-en.html
 http://docs.univention.de/release-notes-4.0-1-de.html

If this error occurs again, please use "Clone This Bug".