jasper: multiple issues

• CVE-2016-1577 (arbitrary code execution)

Double free vulnerability in the jas_iccattrval_destroy function in
JasPer 1.900.1 and earlier allows remote attackers to cause a denial of
service (crash) or possibly execute arbitrary code via a crafted ICC
color profile in a JPEG 2000 image file.

• CVE-2016-2089 (denial of service)

The jas_matrix_clip function in jas_seq.c in JasPer 1.900.1 allows
remote attackers to cause a denial of service (invalid read and
application crash) via a crafted JPEG 2000 image.

• CVE-2016-2116 (denial of service)

Memory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1
and earlier allows remote attackers to cause a denial of service
(memory consumption) via a crafted ICC color profile in a JPEG 2000
image file.