lp://staging/ubuntu/gutsy-updates/jasper

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

5. By Marc Deslauriers on 2009-03-18

* SECURITY UPDATE: integer overflows via integer multiplication for
  memory allocation
  - src/libjasper/include/jasper/jas_malloc.h,
    src/libjasper/base/jas_malloc.c:
    * introduce new size-checked allocation functions
  - src/libjasper/base/jas_*.c,
    src/libjasper/bmp/bmp_dec.c,
    src/libjasper/jp2/jp2_*.c,
    src/libjasper/jpc/jpc_*.c,
    src/libjasper/mif/mif_cod.c:
    * use new size-checked allocation functions
  - CVE-2008-3520
* SECURITY UPDATE: denial of service via temporary file name prediction
  - src/libjasper/base/jas_stream.c: use mkstemp()
  - CVE-2008-3521
* SECURITY UPDATE: buffer overflow via vsprintf in jas_stream_printf()
  - src/libjasper/base/jas_stream.c: use vsnprintf()
  - CVE-2008-3522

4. By Roland Stigge <email address hidden> on 2007-04-10

Fixed segfaults on broken images (Closes: #413041)

3. By Roland Stigge <email address hidden> on 2004-06-20

* Prevent compression of pdf documents in binary packages
* Added man pages for the executables (Closes: #250077)
* Again renamed binary packages to reflect Policy:
    - libjasper-1.701-1
    - libjasper-1.701-dev (Provides, Replaces and Conflicts: libjasper-dev)
    - libjasper-runtime

2. By Chris Cheney on 2003-08-22

Initial Release.

1. By Chris Cheney on 2003-08-22

Import upstream version 1.700.2