[ubuntu/natty-security] jasper 1.900.1-7ubuntu2.11.04.1 (Accepted)

[Marc Deslauriers]

jasper (1.900.1-7ubuntu2.11.04.1) natty-security; urgency=low

  * SECURITY UPDATE: denial of service and possible code execution via
    heap-based buffer overflows.
    - src/libjasper/jpc/jpc_cs.c: validate compparms->numrlvls and allocate
      proper size in src/libjasper/jpc/jpc_cs.c.
    - Thanks to Red Hat for the patch
    - CVE-2011-4516
    - CVE-2011-4517

Date: Mon, 19 Dec 2011 10:45:25 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/natty/+source/jasper/1.900.1-7ubuntu2.11.04.1
-------------- next part --------------
Format: 1.8
Date: Mon, 19 Dec 2011 10:45:25 -0500
Source: jasper
Binary: libjasper1 libjasper-dev libjasper-runtime
Architecture: source
Version: 1.900.1-7ubuntu2.11.04.1
Distribution: natty-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libjasper-dev - Development files for the JasPer JPEG-2000 library
 libjasper-runtime - Programs for manipulating JPEG-2000 files
 libjasper1 - The JasPer JPEG-2000 runtime library
Changes: 
 jasper (1.900.1-7ubuntu2.11.04.1) natty-security; urgency=low
 .
   * SECURITY UPDATE: denial of service and possible code execution via
     heap-based buffer overflows.
     - src/libjasper/jpc/jpc_cs.c: validate compparms->numrlvls and allocate
       proper size in src/libjasper/jpc/jpc_cs.c.
     - Thanks to Red Hat for the patch
     - CVE-2011-4516
     - CVE-2011-4517
Checksums-Sha1: 
 61ed8e995e1e0d029badcefbd172d40cf8a31f17 1845 jasper_1.900.1-7ubuntu2.11.04.1.dsc
 00873b91830dc68c7a381d32cf1c3f17ba71810b 53785 jasper_1.900.1-7ubuntu2.11.04.1.diff.gz
Checksums-Sha256: 
 033c1efd62b727982c55442e69246c9254ddbed86255cbeb60589f93dbb835a5 1845 jasper_1.900.1-7ubuntu2.11.04.1.dsc
 998092ab9dd3821d602c42359e2ed06dc4f0891d279f2b551cbad0c6e8132d57 53785 jasper_1.900.1-7ubuntu2.11.04.1.diff.gz
Files: 
 56608a1d0f69db020f6fd0ba174bdadc 1845 graphics optional jasper_1.900.1-7ubuntu2.11.04.1.dsc
 c0492923cee053eadce3369492edbefa 53785 graphics optional jasper_1.900.1-7ubuntu2.11.04.1.diff.gz
Original-Maintainer: Roland Stigge <stigge at antcom.de>