ID de Prueba:	1.3.6.1.4.1.25623.1.1.13.2015.302.02
Categoría:	Slackware Local Security Checks
Título:	Slackware: Security Advisory (SSA:2015-302-02)
Resumen:	The remote host is missing an update for the 'jasper' package(s) announced via the SSA:2015-302-02 advisory.
Descripción:	Summary: The remote host is missing an update for the 'jasper' package(s) announced via the SSA:2015-302-02 advisory. Vulnerability Insight: New jasper packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/jasper-1.900.1-i486-4_slack14.1.txz: Rebuilt. Applied many security and bug fixes. Thanks to Heinz Wiesinger. For more information, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'jasper' package(s) on Slackware 13.0, Slackware 13.1, Slackware 13.37, Slackware 14.0, Slackware 14.1, Slackware current. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3520 BugTraq ID: 31470 http://www.securityfocus.com/bid/31470 http://security.gentoo.org/glsa/glsa-200812-18.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:142 http://www.mandriva.com/security/advisories?name=MDVSA-2009:144 http://www.mandriva.com/security/advisories?name=MDVSA-2009:164 http://bugs.gentoo.org/show_bug.cgi?id=222819 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10141 http://www.redhat.com/support/errata/RHSA-2009-0012.html RedHat Security Advisories: RHSA-2015:0698 http://rhn.redhat.com/errata/RHSA-2015-0698.html http://secunia.com/advisories/33173 http://secunia.com/advisories/34391 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606 http://www.ubuntu.com/usn/USN-742-1 XForce ISS Database: jasper-image-file-bo(45621) https://exchange.xforce.ibmcloud.com/vulnerabilities/45621 Common Vulnerability Exposure (CVE) ID: CVE-2008-3522 http://bugs.gentoo.org/attachment.cgi?id=163282&action=view XForce ISS Database: jasper-jasstreamprintf-bo(45623) https://exchange.xforce.ibmcloud.com/vulnerabilities/45623 Common Vulnerability Exposure (CVE) ID: CVE-2011-4516 BugTraq ID: 50992 http://www.securityfocus.com/bid/50992 CERT/CC vulnerability note: VU#887409 http://www.kb.cert.org/vuls/id/887409 Debian Security Information: DSA-2371 (Google Search) http://www.debian.org/security/2011/dsa-2371 http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071561.html http://lists.fedoraproject.org/pipermail/package-announce/2011-December/071458.html http://osvdb.org/77595 http://www.redhat.com/support/errata/RHSA-2011-1807.html http://www.redhat.com/support/errata/RHSA-2011-1811.html http://secunia.com/advisories/47193 http://secunia.com/advisories/47306 http://secunia.com/advisories/47353 SuSE Security Announcement: openSUSE-SU-2011:1317 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00010.html http://www.ubuntu.com/usn/USN-1315-1 Common Vulnerability Exposure (CVE) ID: CVE-2011-4517 http://osvdb.org/77596 XForce ISS Database: jasper-jpccrggetparms-bo(71701) https://exchange.xforce.ibmcloud.com/vulnerabilities/71701 Common Vulnerability Exposure (CVE) ID: CVE-2014-8137 BugTraq ID: 71742 http://www.securityfocus.com/bid/71742 Debian Security Information: DSA-3106 (Google Search) http://www.debian.org/security/2014/dsa-3106 http://www.mandriva.com/security/advisories?name=MDVSA-2015:012 http://www.mandriva.com/security/advisories?name=MDVSA-2015:159 http://packetstormsecurity.com/files/129660/JasPer-1.900.1-Double-Free-Heap-Overflow.html https://www.ocert.org/advisories/ocert-2014-012.html RedHat Security Advisories: RHSA-2014:2021 http://rhn.redhat.com/errata/RHSA-2014-2021.html RedHat Security Advisories: RHSA-2015:1713 http://rhn.redhat.com/errata/RHSA-2015-1713.html http://www.securitytracker.com/id/1033459 http://secunia.com/advisories/61747 http://secunia.com/advisories/62311 http://secunia.com/advisories/62615 http://secunia.com/advisories/62619 SuSE Security Announcement: openSUSE-SU-2015:0038 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-01/msg00013.html SuSE Security Announcement: openSUSE-SU-2015:0039 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-01/msg00014.html SuSE Security Announcement: openSUSE-SU-2015:0042 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-01/msg00017.html http://www.ubuntu.com/usn/USN-2483-1 http://www.ubuntu.com/usn/USN-2483-2 Common Vulnerability Exposure (CVE) ID: CVE-2014-8138 BugTraq ID: 71746 http://www.securityfocus.com/bid/71746 Common Vulnerability Exposure (CVE) ID: CVE-2014-8157 BugTraq ID: 72296 http://www.securityfocus.com/bid/72296 Debian Security Information: DSA-3138 (Google Search) http://www.debian.org/security/2015/dsa-3138 http://www.mandriva.com/security/advisories?name=MDVSA-2015:034 http://www.ocert.org/advisories/ocert-2015-001.html RedHat Security Advisories: RHSA-2015:0074 http://rhn.redhat.com/errata/RHSA-2015-0074.html http://secunia.com/advisories/62583 http://secunia.com/advisories/62765 SuSE Security Announcement: openSUSE-SU-2015:0200 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-02/msg00014.html Common Vulnerability Exposure (CVE) ID: CVE-2014-8158 BugTraq ID: 72293 http://www.securityfocus.com/bid/72293 Common Vulnerability Exposure (CVE) ID: CVE-2014-9029 BugTraq ID: 71476 http://www.securityfocus.com/bid/71476 Bugtraq: 20141204 [oCERT-2014-009] JasPer input sanitization errors (Google Search) http://www.securityfocus.com/archive/1/534153/100/0/threaded Debian Security Information: DSA-3089 (Google Search) http://www.debian.org/security/2014/dsa-3089 http://www.mandriva.com/security/advisories?name=MDVSA-2014:247 http://packetstormsecurity.com/files/129393/JasPer-1.900.1-Buffer-Overflow.html http://www.ocert.org/advisories/ocert-2014-009.html http://www.openwall.com/lists/oss-security/2014/12/04/9 http://secunia.com/advisories/62828 http://www.ubuntu.com/usn/USN-2434-1 http://www.ubuntu.com/usn/USN-2434-2 XForce ISS Database: jasper-cve20149029-bo(99125) https://exchange.xforce.ibmcloud.com/vulnerabilities/99125
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.