Bug 618482

Summary:	media-libs/jasper CVE-2017-5503 jasper: invalid memory write in dec_clnpass()
Product:	Gentoo Security	Reporter:	Volkan <vBugZilla>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://bugzilla.redhat.com/show_bug.cgi?id=1416056
Whiteboard:	A3 [upstream]
Package list:		Runtime testing required:	---

Description Volkan 2017-05-15 00:30:15 UTC

A vulnerability was found in jasper. A crafted file could cause an invalid memory write.

References:

http://seclists.org/oss-sec/2017/q1/102

Upstream bug:

https://github.com/mdadams/jasper/issues/90

Comment 1 Agostino Sarubbo gentoo-dev

2017-05-15 06:57:16 UTC


*** This bug has been marked as a duplicate of bug 614028 ***