Security update for jasper SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:2513-1 Final 1 1 2019-10-02T08:48:34Z current 2019-10-02T08:48:34Z 2019-10-02T08:48:34Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for jasper This update for jasper fixes the following issues: Security issues fixed: - CVE-2018-19540: Fixed a heap based overflow in jas_icctxtdesc_input (bsc#1117508). - CVE-2018-19541: Fix heap based overread in jas_image_depalettize (bsc#1117507). - CVE-2018-19542: Fixed a denial of service in jp2_decode (bsc#1117505). - CVE-2018-19539: Fixed a denial of service in jas_image_readcmpt (bsc#1117511). - CVE-2016-9396: Fixed a denial of service in jpc_cox_getcompparms (bsc#1010783). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-SAP-Azure-2019-2513,Image SLES12-SP4-SAP-Azure-BYOS-2019-2513,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2019-2513,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2019-2513,Image SLES12-SP4-SAP-EC2-HVM-2019-2513,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2019-2513,Image SLES12-SP4-SAP-GCE-2019-2513,Image SLES12-SP4-SAP-GCE-BYOS-2019-2513,Image SLES12-SP4-SAP-OCI-BYOS-2019-2513,Image SLES12-SP5-Azure-SAP-BYOS-2019-2513,Image SLES12-SP5-Azure-SAP-On-Demand-2019-2513,Image SLES12-SP5-EC2-SAP-BYOS-2019-2513,Image SLES12-SP5-EC2-SAP-On-Demand-2019-2513,Image SLES12-SP5-GCE-SAP-BYOS-2019-2513,Image SLES12-SP5-GCE-SAP-On-Demand-2019-2513,Image SLES12-SP5-OCI-BYOS-SAP-BYOS-2019-2513,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2019-2513,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2019-2513,SUSE-2019-2513,SUSE-SLE-DESKTOP-12-SP4-2019-2513,SUSE-SLE-SDK-12-SP4-2019-2513,SUSE-SLE-SERVER-12-SP4-2019-2513 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20192513-1/ Link for SUSE-SU-2019:2513-1 https://lists.suse.com/pipermail/sle-security-updates/2019-October/005977.html E-Mail link for SUSE-SU-2019:2513-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1010783 SUSE Bug 1010783 https://bugzilla.suse.com/1117505 SUSE Bug 1117505 https://bugzilla.suse.com/1117507 SUSE Bug 1117507 https://bugzilla.suse.com/1117508 SUSE Bug 1117508 https://bugzilla.suse.com/1117511 SUSE Bug 1117511 https://www.suse.com/security/cve/CVE-2016-9396/ SUSE CVE CVE-2016-9396 page https://www.suse.com/security/cve/CVE-2018-19539/ SUSE CVE CVE-2018-19539 page https://www.suse.com/security/cve/CVE-2018-19540/ SUSE CVE CVE-2018-19540 page https://www.suse.com/security/cve/CVE-2018-19541/ SUSE CVE CVE-2018-19541 page https://www.suse.com/security/cve/CVE-2018-19542/ SUSE CVE CVE-2018-19542 page Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 libjasper1-1.900.14-195.15.1 jasper-1.900.14-195.15.1 libjasper-devel-1.900.14-195.15.1 libjasper1-32bit-1.900.14-195.15.1 libjasper1-64bit-1.900.14-195.15.1 libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP4-SAP-Azure libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP4-SAP-EC2-HVM libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP4-SAP-GCE libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libjasper1-1.900.14-195.15.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libjasper1-1.900.14-195.15.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libjasper1-32bit-1.900.14-195.15.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libjasper1-1.900.14-195.15.1 as a component of SUSE Linux Enterprise Server 12 SP4 libjasper1-32bit-1.900.14-195.15.1 as a component of SUSE Linux Enterprise Server 12 SP4 libjasper1-1.900.14-195.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libjasper1-32bit-1.900.14-195.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libjasper-devel-1.900.14-195.15.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT assertion failure) via unspecified vectors. CVE-2016-9396 Image SLES12-SP4-SAP-Azure-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-EC2-HVM:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-GCE-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-GCE:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-OCI-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-Azure-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-Azure-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-EC2-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-EC2-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-GCE-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-GCE-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Desktop 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Desktop 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Server 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Server 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libjasper-devel-1.900.14-195.15.1 moderate 1.5 AV:L/AC:M/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192513-1/ https://www.suse.com/security/cve/CVE-2016-9396.html CVE-2016-9396 https://bugzilla.suse.com/1010783 SUSE Bug 1010783 https://bugzilla.suse.com/1021871 SUSE Bug 1021871 https://bugzilla.suse.com/1082397 SUSE Bug 1082397 https://bugzilla.suse.com/1154883 SUSE Bug 1154883 https://bugzilla.suse.com/1178702 SUSE Bug 1178702 An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service. CVE-2018-19539 Image SLES12-SP4-SAP-Azure-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-EC2-HVM:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-GCE-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-GCE:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-OCI-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-Azure-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-Azure-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-EC2-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-EC2-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-GCE-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-GCE-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Desktop 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Desktop 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Server 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Server 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libjasper-devel-1.900.14-195.15.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192513-1/ https://www.suse.com/security/cve/CVE-2018-19539.html CVE-2018-19539 https://bugzilla.suse.com/1117511 SUSE Bug 1117511 https://bugzilla.suse.com/1178702 SUSE Bug 1178702 An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer overflow of size 1 in the function jas_icctxtdesc_input in libjasper/base/jas_icc.c. CVE-2018-19540 Image SLES12-SP4-SAP-Azure-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-EC2-HVM:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-GCE-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-GCE:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-OCI-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-Azure-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-Azure-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-EC2-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-EC2-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-GCE-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-GCE-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Desktop 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Desktop 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Server 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Server 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libjasper-devel-1.900.14-195.15.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192513-1/ https://www.suse.com/security/cve/CVE-2018-19540.html CVE-2018-19540 https://bugzilla.suse.com/1117508 SUSE Bug 1117508 https://bugzilla.suse.com/1178702 SUSE Bug 1178702 An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c. CVE-2018-19541 Image SLES12-SP4-SAP-Azure-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-EC2-HVM:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-GCE-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-GCE:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-OCI-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-Azure-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-Azure-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-EC2-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-EC2-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-GCE-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-GCE-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Desktop 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Desktop 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Server 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Server 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libjasper-devel-1.900.14-195.15.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192513-1/ https://www.suse.com/security/cve/CVE-2018-19541.html CVE-2018-19541 https://bugzilla.suse.com/1117507 SUSE Bug 1117507 https://bugzilla.suse.com/1119411 SUSE Bug 1119411 https://bugzilla.suse.com/1178702 SUSE Bug 1178702 An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service. CVE-2018-19542 Image SLES12-SP4-SAP-Azure-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-Azure:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-EC2-HVM:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-GCE-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-GCE:libjasper1-1.900.14-195.15.1 Image SLES12-SP4-SAP-OCI-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-Azure-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-Azure-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-EC2-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-EC2-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-GCE-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-GCE-SAP-On-Demand:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libjasper1-1.900.14-195.15.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Desktop 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Desktop 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Server 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Server 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjasper1-1.900.14-195.15.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjasper1-32bit-1.900.14-195.15.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libjasper-devel-1.900.14-195.15.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192513-1/ https://www.suse.com/security/cve/CVE-2018-19542.html CVE-2018-19542 https://bugzilla.suse.com/1117505 SUSE Bug 1117505 https://bugzilla.suse.com/1117507 SUSE Bug 1117507 https://bugzilla.suse.com/1178702 SUSE Bug 1178702