[CLSA-2026:1792442076] jasper: Fix of 4 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-19 20:34:50 UTC
Description:
- Add Amazon Linux 2 ELS support (mirrors centos7els branch with .amzn2 dist via / leapfrog over stock 1.900.1-33.amzn2.0.1) - Import CVE-2020-27828 patch from amzn2 stock SRPM (out-of-bounds write in jpc encoder; jasper-2.0.14-CVE-2020-27828.patch) - Import CVE-2021-3443 patch from amzn2 stock SRPM (NULL pointer dereference in JP2 component reference handling) - Import CVE-2021-3467 patch from amzn2 stock SRPM (NULL pointer dereference in CDEF box channel reference handling)
Updated packages:
  • jasper-1.900.1-33.el7.tuxcare.els6.i686.rpm
    sha:bd6de2a0e3910a9e14b563ccdb55a1c9625aabafa1da1104f990da3369eb0223
  • jasper-1.900.1-33.el7.tuxcare.els6.x86_64.rpm
    sha:db4feec8130bdc05b6c40e1fc2de4d54305183dc49439aa4da4be33c2f18124d
  • jasper-devel-1.900.1-33.el7.tuxcare.els6.i686.rpm
    sha:5f0e586b0353cafd7169505b1c7234bfc9f49f837bdb7dd8c8e16ecd867eb9bf
  • jasper-devel-1.900.1-33.el7.tuxcare.els6.x86_64.rpm
    sha:7236ee0dfee573f5676090d5755c1c2f35346c68f7c839c6f1bc64f572823c50
  • jasper-libs-1.900.1-33.el7.tuxcare.els6.i686.rpm
    sha:66b6e4e8690c5aa858de25cbace5aa5b067c6585a6077cd4a746fc065ff2919b
  • jasper-libs-1.900.1-33.el7.tuxcare.els6.x86_64.rpm
    sha:f072a5461162c3672df8917bdf4cd10eae0f1965edbcc8c868d6d88e70e49235
  • jasper-utils-1.900.1-33.el7.tuxcare.els6.i686.rpm
    sha:0fcacd2f765e4b7367fbcfa162855025760dfb810da805b4f6dacb03029bb039
  • jasper-utils-1.900.1-33.el7.tuxcare.els6.x86_64.rpm
    sha:1207150bccb5344bcedaa90be6d5be61def69fff920f28ca14b210a6bd4931ea
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.