[CLSA-2026:1790873582] jasper: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-02 14:02:43 UTC
Description:
- CVE-2023-51257: out-of-bounds write in jas_icctxt_input() - CVE-2025-8836: reachable assertion in jpc_floorlog2() via cp_create() - CVE-2025-8837: use-after-free in jpc_dec_dump()
CVEs fixed:
Updated packages:
  • jasper-2.0.28-4.el9.tuxcare.els1.aarch64.rpm
    sha:7889707487a66e0ba7f31ed110d480b143fea46d18709d5164eb24ff0ea384b2
  • jasper-2.0.28-4.el9.tuxcare.els1.i686.rpm
    sha:c84b3f8db2fc672cf90311e003a817814e088a4af9626db79232809d58bdee7b
  • jasper-2.0.28-4.el9.tuxcare.els1.x86_64.rpm
    sha:ec3dfa3da10aca64aba16e41374f27caef0fc76e8fd6dc55773cd19f32b075a0
  • jasper-devel-2.0.28-4.el9.tuxcare.els1.aarch64.rpm
    sha:f5445074ada7cbd51af7e5564e89fe2af1289b7fdf587d0d096e60047e5aa5cc
  • jasper-devel-2.0.28-4.el9.tuxcare.els1.i686.rpm
    sha:e729908befefbf71d1156a9137cb45afdde6886a7d03967fdfea62b19568f68b
  • jasper-devel-2.0.28-4.el9.tuxcare.els1.x86_64.rpm
    sha:dc10d21cd8582efccbf8dcbb8a05e3045222149beac62ff961eb7ff83fe220f4
  • jasper-libs-2.0.28-4.el9.tuxcare.els1.aarch64.rpm
    sha:47ce906ce7bee89bee7da70607e82ba1a41dcff72cfd049554c3882783c24e5b
  • jasper-libs-2.0.28-4.el9.tuxcare.els1.i686.rpm
    sha:fae613dfcfe55b9cfbb867254090b554a6790fad1f23179097d4b0925cd4448c
  • jasper-libs-2.0.28-4.el9.tuxcare.els1.x86_64.rpm
    sha:6565da764fa5f9626a9c7205a2795df3f74f3906b0d626c14b6ef3617c6795fb
  • jasper-utils-2.0.28-4.el9.tuxcare.els1.aarch64.rpm
    sha:62992a7945861166e4c1beb6b93e0a908b4054948acc6cc562e6183a8a6921b6
  • jasper-utils-2.0.28-4.el9.tuxcare.els1.i686.rpm
    sha:8cfe2421f2dee8b6901aa4c260a3859e77183361a100d880eac151798557aa3a
  • jasper-utils-2.0.28-4.el9.tuxcare.els1.x86_64.rpm
    sha:e60bb3f4ee600d95cf083f4b7a3d7136c71e16a6b732028b2e57703a52f84421
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.