—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2014:247
http://www.mandriva.com/en/support/security/
_______________________________________________________________________

Package : jasper
Date : December 14, 2014
Affected: Business Server 1.0
_______________________________________________________________________

Problem Description:

Updated jasper packages fix security vulnerability:

Josh Duart of the Google Security Team discovered heap-based buffer
overflow flaws in JasPer, which could lead to denial of service
(application crash) or the execution of arbitrary code (CVE-2014-9029).
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9029
http://advisories.mageia.org/MGASA-2014-0514.html
_______________________________________________________________________

Updated Packages:

Mandriva Business Server 1/X86_64:
127a9571041d0e397a25dcdaaa280387 mbs1/x86_64/jasper-1.900.1-14.1.mbs1.x86_64.rpm
17ffcbbb80b09dda003bfd4c62373403 mbs1/x86_64/lib64jasper1-1.900.1-14.1.mbs1.x86_64.rpm
249235a79a592ea9841fd76b0b03b50f mbs1/x86_64/lib64jasper-devel-1.900.1-14.1.mbs1.x86_64.rpm
8f723d7b42e445482db185685a18f9e8 mbs1/x86_64/lib64jasper-static-devel-1.900.1-14.1.mbs1.x86_64.rpm
b91cae8bd27bb94f8d34b431e66fce25 mbs1/SRPMS/jasper-1.900.1-14.1.mbs1.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg –recv-keys –keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/en/support/security/advisories/

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1.4.12 (GNU/Linux)

iD8DBQFUjcmCmqjQ0CJFipgRAiKzAJ0Z0bn5uFmyy5pmMtlpX3gINULgcACgyylL
LeOMbK6U5skoZY8rGK14elA=
=jWSZ
—–END PGP SIGNATURE—–

To unsubscribe, send a email to sympa@mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva?
Go to http://store.mandriva.com
_______________________________________________________