Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

jasper: CVE-2016-8693

Related Vulnerabilities: CVE-2016-8693  

Source

Debian Bug report logs - #841110
jasper: CVE-2016-8693

version graph

Package: src:jasper; Maintainer for src:jasper is Roland Stigge <stigge@antcom.de>;

Reported by: Salvatore Bonaccorso <carnil@debian.org>

Date: Mon, 17 Oct 2016 18:03:01 UTC

Severity: grave

Tags: fixed-upstream, security, upstream

Found in version jasper/1.900.1-13

Fixed in version 1.900.1-debian1-2.4+deb8u1+rm

Done: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

Bug is archived. No further changes may be made.

Forwarded to https://github.com/mdadams/jasper/issues/32

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, carnil@debian.org, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Roland Stigge <stigge@antcom.de>:
Bug#841110; Package src:jasper. (Mon, 17 Oct 2016 18:03:04 GMT) (full text, mbox, link).

Acknowledgement sent to Salvatore Bonaccorso <carnil@debian.org>:
New Bug report received and forwarded. Copy sent to carnil@debian.org, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Roland Stigge <stigge@antcom.de>. (Mon, 17 Oct 2016 18:03:04 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: jasper: CVE-2016-8693
Date: Mon, 17 Oct 2016 20:01:52 +0200
Source: jasper
Version: 1.900.1-13
Severity: grave
Tags: security upstream

Hi,

the following vulnerability was published for jasper.

CVE-2016-8693[0]:
attempting double-free ... mem_close ... jas_stream.c

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-8693
[1] https://blogs.gentoo.org/ago/2016/10/16/jasper-double-free-in-mem_close-jas_stream-c/

Regards,
Salvatore

Set Bug forwarded-to-address to 'https://github.com/mdadams/jasper/issues/32'. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Sun, 23 Oct 2016 11:09:02 GMT) (full text, mbox, link).

Added tag(s) fixed-upstream. Request was from bts-link-upstream@lists.alioth.debian.org to control@bugs.debian.org. (Thu, 27 Oct 2016 17:51:14 GMT) (full text, mbox, link).

Reply sent to Debian FTP Masters <ftpmaster@ftp-master.debian.org>:
You have taken responsibility. (Sat, 05 Nov 2016 04:32:34 GMT) (full text, mbox, link).

Notification sent to Salvatore Bonaccorso <carnil@debian.org>:
Bug acknowledged by developer. (Sat, 05 Nov 2016 04:32:34 GMT) (full text, mbox, link).

Message #14 received at 841110-done@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 413033-done@bugs.debian.org,493964-done@bugs.debian.org,507441-done@bugs.debian.org,617818-done@bugs.debian.org,663962-done@bugs.debian.org,681231-done@bugs.debian.org,681234-done@bugs.debian.org,687931-done@bugs.debian.org,706673-done@bugs.debian.org,741359-done@bugs.debian.org,749949-done@bugs.debian.org,773512-done@bugs.debian.org,773703-done@bugs.debian.org,792226-done@bugs.debian.org,792227-done@bugs.debian.org,796107-done@bugs.debian.org,796253-done@bugs.debian.org,811023-done@bugs.debian.org,816228-done@bugs.debian.org,841110-done@bugs.debian.org,841111-done@bugs.debian.org,841112-done@bugs.debian.org,835639-done@bugs.debian.org,
Cc: jasper@packages.debian.org, jasper@packages.qa.debian.org
Subject: Bug#812630: Removed package(s) from unstable
Date: Sat, 05 Nov 2016 04:26:37 +0000
Version: 1.900.1-debian1-2.4+deb8u1+rm

Dear submitter,

as the package jasper has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/812630

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Scott Kitterman (the ftpmaster behind the curtain)

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 05 Dec 2016 07:50:44 GMT) (full text, mbox, link).

Bug unarchived. Request was from Don Armstrong <don@debian.org> to control@bugs.debian.org. (Wed, 07 Dec 2016 02:01:25 GMT) (full text, mbox, link).

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 18 Jun 2017 07:26:14 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 15:58:13 2019; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook

Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started