Medium ELSA-2021-4235 4 CVEs

Moderate: jasper security update (Oracle Linux 8)

Published Nov 16, 2021 · Updated Nov 16, 2021

Ecosystem: Oracle Linux

Summary

[2.0.14-5]
- Fix CVE-2021-26927 (#1933860)
- Fix CVE-2021-26926 (#1922316)
- Fix CVE-2021-3272 (#1922283)
- Fix CVE-2020-27828 (#1905692)

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	jasper-devel	0:2.0.14-5.el8
Oracle Linux · 8	jasper-libs	0:2.0.14-5.el8

Vulnerabilities 4

Unscored —

CVE-2020-27828

There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker cou…

jasper Ubuntu

Dec 11, 2020
Unscored —

CVE-2021-26926

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to…

jasper jasper Ubuntu Azure Linux

Feb 23, 2021
Unscored —

CVE-2021-26927

A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program cra…

jasper jasper Ubuntu Azure Linux

Feb 23, 2021
Unscored —

CVE-2021-3272

jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid re…

jasper jasper Ubuntu Azure Linux

Jan 27, 2021