SUSE-SU-2024:0240-1: Security update for jasper
This update for jasper fixes the following issues: CVE-2023-51257: Fixed an out of bounds write in the JPC encoder (bsc#1218802).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/jasper-debugsourceto a version that resolves this vulnerability.Fixed in 1.900.14-195.37.1 - Upgrade
Upgrade
suse/jasper-debuginfoto a version that resolves this vulnerability.Fixed in 1.900.14-195.37.1 - Upgrade
Upgrade
suse/libjasper1to a version that resolves this vulnerability.Fixed in 1.900.14-195.37.1 - Upgrade
Upgrade
suse/libjasper1-debuginfoto a version that resolves this vulnerability.Fixed in 1.900.14-195.37.1 - Upgrade
Upgrade
suse/libjasper1to a version that resolves this vulnerability.Fixed in 32bit-1.900.14-195.37.1 - Upgrade
Upgrade
suse/libjasper1-debuginfoto a version that resolves this vulnerability.Fixed in 32bit-1.900.14-195.37.1 - Upgrade
Upgrade
suse/libjasper-develto a version that resolves this vulnerability.Fixed in 1.900.14-195.37.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SDK-12-SP5-2024-240=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-2024-240=1
Event History
Frequently Asked Questions
Which systems are covered by this update?
The update applies to SUSE Linux Enterprise Server 12 SP5 on aarch64, ppc64le, s390x, and x86_64, and to SUSE Linux Enterprise High Performance Computing 12 SP5 on the listed aarch64, s390x, and x86_64 platforms. The affected packages include libjasper1 and associated debugging packages.
What flaw is corrected by the update?
The update fixes CVE-2023-51257, an out-of-bounds write in the JPC encoder in jasper.
How can I identify whether this update is relevant to a host?
Check whether the host runs one of the listed SUSE 12 SP5 products and has the libjasper1 package installed. Debugging-related jasper packages are also included in the update.