Back to bug 1385502
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Josef Ridky | 2016-10-17 08:44:36 UTC | Status | NEW | ASSIGNED |
| Component | vulnerability | jasper | ||
| Version | unspecified | rawhide | ||
| Assignee | security-response-team | jridky | ||
| Product | Security Response | Fedora | ||
| Adam Mariš | 2016-10-17 08:49:20 UTC | Status | ASSIGNED | NEW |
| Component | jasper | vulnerability | ||
| Version | rawhide | unspecified | ||
| Assignee | jridky | security-response-team | ||
| Product | Fedora | Security Response | ||
| Josef Ridky | 2016-10-17 08:51:34 UTC | Blocks | 1385503 | |
| Adam Mariš | 2016-10-17 08:52:04 UTC | Blocks | 1385510 | |
| Adam Mariš | 2016-10-17 08:53:35 UTC | Summary | CVE-2016-8691 Divide by zero in jpc_dec_process_siz | CVE-2016-8691 jasper: Divide by zero in jpc_dec_process_siz |
| Adam Mariš | 2016-10-17 08:54:29 UTC | Depends On | 1385516 | |
| Adam Mariš | 2016-10-17 08:54:38 UTC | Depends On | 1385517 | |
| Adam Mariš | 2016-10-17 08:54:47 UTC | Depends On | 1385518 | |
| Adam Mariš | 2016-10-17 08:54:56 UTC | Depends On | 1385519 | |
| Slawomir Czarko | 2016-10-18 08:19:58 UTC | CC | slawomir | |
| Andrej Nemec | 2016-10-19 07:02:43 UTC | Blocks | 1385503 | |
| Adam Mariš | 2016-10-26 13:01:55 UTC | Fixed In Version | jasper 1.900.4, jasper 1.900.5 | jasper 1.900.4 |
| Tomas Hoger | 2016-11-29 09:36:22 UTC | Blocks | 1385510 | |
| Tomas Hoger | 2016-11-29 09:38:22 UTC | Blocks | 1314477 | |
| Tomas Hoger | 2016-11-30 10:45:43 UTC | Priority | medium | low |
| Summary | CVE-2016-8691 jasper: Divide by zero in jpc_dec_process_siz | CVE-2016-8691 CVE-2016-8692 jasper: missing SIZ marker segment XRsiz and YRsiz fields range check | ||
| Alias | CVE-2016-8692 | |||
| Whiteboard | impact=moderate,public=20161015,reported=20161015,source=oss-security,cvss2=4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P,cvss3=5.3/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L,cwe=CWE-369,rhel-5/netpbm=new,rhel-6/jasper=new,rhel-7/jasper=new,openshift-enterprise-2/jasper=new,rhev-m-3/mingw-virt-viewer=new,fedora-all/jasper=affected,fedora-all/mingw-jasper=affected,epel-5/jasper=affected,epel-7/mingw-jasper=affected | impact=low,public=20161015,reported=20161015,source=oss-security,cvss2=4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P,cvss3=3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L,cwe=CWE-20->CWE-369,rhel-5/netpbm=wontfix,rhel-6/jasper=wontfix,rhel-7/jasper=wontfix,rhev-m-3/mingw-virt-viewer=wontfix,fedora-all/jasper=affected,fedora-all/mingw-jasper=affected,epel-5/jasper=affected,epel-7/mingw-jasper=affected | ||
| Severity | medium | low | ||
| Tomas Hoger | 2016-11-30 11:36:30 UTC | Status | NEW | CLOSED |
| Resolution | --- | WONTFIX | ||
| Last Closed | 2016-11-30 06:36:30 UTC | |||
| Tomas Hoger | 2017-03-29 19:03:23 UTC | Status | CLOSED | NEW |
| Resolution | WONTFIX | --- | ||
| Whiteboard | impact=low,public=20161015,reported=20161015,source=oss-security,cvss2=4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P,cvss3=3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L,cwe=CWE-20->CWE-369,rhel-5/netpbm=wontfix,rhel-6/jasper=wontfix,rhel-7/jasper=wontfix,rhev-m-3/mingw-virt-viewer=wontfix,fedora-all/jasper=affected,fedora-all/mingw-jasper=affected,epel-5/jasper=affected,epel-7/mingw-jasper=affected | impact=low,public=20161015,reported=20161015,source=oss-security,cvss2=4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P,cvss3=5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H,cwe=CWE-20->CWE-369,rhel-5/netpbm=wontfix,rhel-6/jasper=affected,rhel-7/jasper=affected,rhev-m-3/mingw-virt-viewer=wontfix,fedora-all/jasper=affected,fedora-all/mingw-jasper=affected,epel-5/jasper=affected,epel-7/mingw-jasper=affected | ||
| Keywords | Reopened | |||
| Tomas Hoger | 2017-03-29 19:04:35 UTC | Keywords | Reopened | |
| Tomas Hoger | 2017-04-05 11:25:32 UTC | Depends On | 1439171, 1439172, 1439174, 1439173 | |
| Tomas Hoger | 2017-05-09 21:45:50 UTC | Status | NEW | CLOSED |
| Resolution | --- | ERRATA | ||
| Last Closed | 2016-11-30 06:36:30 UTC | 2017-05-09 17:45:50 UTC | ||
| Gil Klein | 2019-04-28 13:28:09 UTC | CC | gklein | |
| Product Security DevOps Team | 2019-09-29 13:57:57 UTC | Whiteboard | impact=low,public=20161015,reported=20161015,source=oss-security,cvss2=4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P,cvss3=5.5/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H,cwe=CWE-20->CWE-369,rhel-5/netpbm=wontfix,rhel-6/jasper=affected,rhel-7/jasper=affected,rhev-m-3/mingw-virt-viewer=wontfix,fedora-all/jasper=affected,fedora-all/mingw-jasper=affected,epel-5/jasper=affected,epel-7/mingw-jasper=affected |
Back to bug 1385502