Bug 765661 - CVE-2011-4516 CVE-2011-4517 jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409) [epel-4]
Summary: CVE-2011-4516 CVE-2011-4517 jasper: heap buffer overflow flaws lead to arbitr...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora EPEL
Classification: Fedora
Component: jasper
Version: el4
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Rex Dieter
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: CVE-2011-4516, CVE-2011-4517
TreeView+ depends on / blocked
 
Reported: 2011-12-09 03:35 UTC by Huzaifa S. Sidhpurwala
Modified: 2012-08-08 08:46 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Release Note
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-03-01 20:02:57 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Huzaifa S. Sidhpurwala 2011-12-09 03:35:16 UTC
epel-4 tracking bug for jasper: see blocks bug list for full details of the security issue(s).

This bug is never intended to be made public, please put any public notes
in the 'blocks' bugs.


[bug automatically created by: add-tracking-bugs]

Comment 1 Fedora Update System 2011-12-09 21:11:35 UTC
jasper-1.900.1-14.el4 has been submitted as an update for Fedora EPEL 4.
https://admin.fedoraproject.org/updates/jasper-1.900.1-14.el4

Comment 2 Fedora Update System 2012-01-02 19:53:31 UTC
jasper-1.900.1-14.el4 has been pushed to the Fedora EPEL 4 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 3 Kevin Fenzi 2012-03-01 20:02:57 UTC
EPEL-4 has reached end of life and is no longer supported. 

Please retest your bug against EPEL-5 or EPEL-6 and re-open if the bug persists in the packages available in those releases, or file a new bug. 

See: http://lists.fedoraproject.org/pipermail/epel-announce/2012-February/000015.html


Note You need to log in before you can comment on or make changes to this bug.