A jasper security update has been released for Debian GNU/Linux 8 Extended LTS to address two security issues.
ELA-361-1 jasper security update
Package jasper
ELA-361-1 jasper security update
Version 1.900.1-debian1-2.4+deb8u9
Related CVEs CVE-2021-26926 CVE-2021-26927
CVE-2021-26926
A heap buffer overflow vulnerability was discovered
in JasPer, through jp2_dec.c in the jp2_decode() function.
CVE-2021-26927
A null pointer access was discovered in JasPer, through
jp2_dec.c in the jp2_decode() function.
For Debian 8 jessie, these problems have been fixed in version 1.900.1-debian1-2.4+deb8u9.
We recommend that you upgrade your jasper packages.
Further information about Extended LTS security advisories can be found at: https://deb.freexian.com/extended-lts/
