[CLSA-2026:1792759730] jasper: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-23 23:41:57 UTC
Description:
- Add Amazon Linux 2 ELS support (mirrors centos7els branch with .amzn2 dist via / leapfrog over stock 1.900.1-33.amzn2.0.1) - Import CVE-2020-27828 patch from amzn2 stock SRPM (out-of-bounds write in jpc encoder; jasper-2.0.14-CVE-2020-27828.patch) - Import CVE-2021-3443 patch from amzn2 stock SRPM (NULL pointer dereference in JP2 component reference handling) - Import CVE-2021-3467 patch from amzn2 stock SRPM (NULL pointer dereference in CDEF box channel reference handling)
Updated packages:
  • jasper-1.900.1-33.el7.tuxcare.els6.i686.rpm
    sha:0d70c4799eebf881e31545fc49d0045d505592a42f85fb54fc742ea2a32d894f
  • jasper-1.900.1-33.el7.tuxcare.els6.x86_64.rpm
    sha:a5913f07d7c47542cbcbedc6055353256eaa9f9d27bee1d0501f0ea2acc85b02
  • jasper-devel-1.900.1-33.el7.tuxcare.els6.i686.rpm
    sha:34af298b4917fca38412967a02fa34259fe5e065264fd3d452635e74c02b892a
  • jasper-devel-1.900.1-33.el7.tuxcare.els6.x86_64.rpm
    sha:7532a933929f86a95c3136714824dfd6a3c59afdf468ab8ac340c3bdb4ab95cc
  • jasper-libs-1.900.1-33.el7.tuxcare.els6.i686.rpm
    sha:3b70fde230a56ec2ec53e3e6499becc55683aaa1b7d3737e940472d6f79b07e5
  • jasper-libs-1.900.1-33.el7.tuxcare.els6.x86_64.rpm
    sha:a146c51f96ee46760ace68e99c80d7f6270742d1c9a455dacfc037063907c1a8
  • jasper-utils-1.900.1-33.el7.tuxcare.els6.i686.rpm
    sha:c89cfe1089d65dc8196b83d237b80827435f42f5e3e1c94aafde13617d734a93
  • jasper-utils-1.900.1-33.el7.tuxcare.els6.x86_64.rpm
    sha:880c8224b916f48e2f43b9fabe8e23b23efdecb6198b2a6bba5042d5346716bb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.