{"schemaVersion":3,"id":"SUSE-SU-2016:2776-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for jasper\n\n\nThis update for jasper fixes the following issues:\n\nSecurity fixes:\n- CVE-2016-8887: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (bsc#1006836)\n- CVE-2016-8886: memory allocation failure in jas_malloc (jas_malloc.c) (bsc#1006599)\n- CVE-2016-8884,CVE-2016-8885: two null pointer dereferences in bmp_getdata (incomplete fix for CVE-2016-8690) (bsc#1007009)\n- CVE-2016-8883: assert in jpc_dec_tiledecode() (bsc#1006598)\n- CVE-2016-8882: segfault / null pointer access in jpc_pi_destroy (bsc#1006597)\n- CVE-2016-8881: Heap overflow in jpc_getuint16() (bsc#1006593)\n- CVE-2016-8880: Heap overflow in jpc_dec_cp_setfromcox() (bsc#1006591)\n- CVE-2016-8693: Double free vulnerability in mem_close (bsc#1005242)\n- CVE-2016-8691, CVE-2016-8692: Divide by zero in jpc_dec_process_siz (bsc#1005090)\n- CVE-2016-8690: Null pointer dereference in bmp_getdata triggered by crafted BMP image (bsc#1005084)\n- CVE-2016-2089: invalid read in the JasPer's jas_matrix_clip() function (bsc#963983)\n- CVE-2016-1867: Out-of-bounds Read in the JasPer's jpc_pi_nextcprl() function (bsc#961886)\n- CVE-2016-1577, CVE-2016-2116: double free vulnerability in the jas_iccattrval_destroy function (bsc#968373)\n- CVE-2015-5221: Use-after-free (and double-free) in Jasper JPEG-200 (bsc#942553)\n- CVE-2015-5203: Double free corruption in JasPer JPEG-2000 implementation (bsc#941919)\n- CVE-2008-3522: multiple integer overflows (bsc#392410)\n- bsc#1006839: NULL pointer dereference in jp2_colr_destroy (jp2_cod.c) (incomplete fix for CVE-2016-8887)","dates":{"published":"2016-11-10T17:08:25.000Z","modified":"2026-02-04T03:28:05.396Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"jasper&distro=SUSE Linux Enterprise Server 11 SP4","name":"jasper","label":"jasper&distro=SUSE Linux Enterprise Server 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/jasper&distro=SUSE Linux Enterprise Server 11 SP4","purlType":"rpm","versions":[{"text":"< 1.900.14-134.25.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.900.14-134.25.1","eol":null,"hubHref":null},{"vendor":"suse","product":"jasper&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","name":"jasper","label":"jasper&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/jasper&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","purlType":"rpm","versions":[{"text":"< 1.900.14-134.25.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.900.14-134.25.1","eol":null,"hubHref":null},{"vendor":"suse","product":"jasper&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","name":"jasper","label":"jasper&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/jasper&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","purlType":"rpm","versions":[{"text":"< 1.900.14-134.25.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.900.14-134.25.1","eol":null,"hubHref":null}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162776-1/","label":"www.suse.com/support/update/announcement/2016/suse-su-20162776-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1005084","label":"bugzilla.suse.com/1005084","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1005090","label":"bugzilla.suse.com/1005090","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1005242","label":"bugzilla.suse.com/1005242","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1006591","label":"bugzilla.suse.com/1006591","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1006593","label":"bugzilla.suse.com/1006593","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1006597","label":"bugzilla.suse.com/1006597","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1006598","label":"bugzilla.suse.com/1006598","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1006599","label":"bugzilla.suse.com/1006599","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1006836","label":"bugzilla.suse.com/1006836","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1006839","label":"bugzilla.suse.com/1006839","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1007009","label":"bugzilla.suse.com/1007009","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/392410","label":"bugzilla.suse.com/392410","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/941919","label":"bugzilla.suse.com/941919","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/942553","label":"bugzilla.suse.com/942553","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/961886","label":"bugzilla.suse.com/961886","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/963983","label":"bugzilla.suse.com/963983","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/968373","label":"bugzilla.suse.com/968373","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3522","label":"www.suse.com/security/cve/CVE-2008-3522","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5203","label":"www.suse.com/security/cve/CVE-2015-5203","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5221","label":"www.suse.com/security/cve/CVE-2015-5221","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1577","label":"www.suse.com/security/cve/CVE-2016-1577","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1867","label":"www.suse.com/security/cve/CVE-2016-1867","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2089","label":"www.suse.com/security/cve/CVE-2016-2089","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2116","label":"www.suse.com/security/cve/CVE-2016-2116","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8690","label":"www.suse.com/security/cve/CVE-2016-8690","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8691","label":"www.suse.com/security/cve/CVE-2016-8691","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8692","label":"www.suse.com/security/cve/CVE-2016-8692","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8693","label":"www.suse.com/security/cve/CVE-2016-8693","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8880","label":"www.suse.com/security/cve/CVE-2016-8880","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8881","label":"www.suse.com/security/cve/CVE-2016-8881","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8882","label":"www.suse.com/security/cve/CVE-2016-8882","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8883","label":"www.suse.com/security/cve/CVE-2016-8883","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8884","label":"www.suse.com/security/cve/CVE-2016-8884","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8885","label":"www.suse.com/security/cve/CVE-2016-8885","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8886","label":"www.suse.com/security/cve/CVE-2016-8886","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8887","label":"www.suse.com/security/cve/CVE-2016-8887","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2008-3522","CVE-2015-5203","CVE-2015-5221","CVE-2016-1577","CVE-2016-1867","CVE-2016-2089","CVE-2016-2116","CVE-2016-8690","CVE-2016-8691","CVE-2016-8692","CVE-2016-8693","CVE-2016-8880","CVE-2016-8881","CVE-2016-8882","CVE-2016-8883","CVE-2016-8884","CVE-2016-8885","CVE-2016-8886","CVE-2016-8887"],"downstream":[],"duplicates":[],"related":["CVE-2008-3522","CVE-2015-5203","CVE-2015-5221","CVE-2016-1577","CVE-2016-1867","CVE-2016-2089","CVE-2016-2116","CVE-2016-8690","CVE-2016-8691","CVE-2016-8692","CVE-2016-8693","CVE-2016-8880","CVE-2016-8881","CVE-2016-8882","CVE-2016-8883","CVE-2016-8884","CVE-2016-8885","CVE-2016-8886","CVE-2016-8887"]},"timeline":[{"kind":"published","date":"2016-11-10T17:08:25.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:28:05.396Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T08:19:02.187Z","stale":false,"partial":false}}