CVE-2021-26926
Fixed in a distro release EPSS 1%
A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.
Products: jasper_project jasper, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | jasper-devel | 2.0.14-5.el8 |
| AlmaLinux 8 | jasper-libs | 2.0.14-5.el8 |
| Amazon Linux 2 | jasper | 1.900.1-33.amzn2.0.1 |
| Amazon Linux 2 | jasper-devel | 1.900.1-33.amzn2.0.1 |
| Amazon Linux 2 | jasper-libs | 1.900.1-33.amzn2.0.1 |
| Amazon Linux 2 | jasper-utils | 1.900.1-33.amzn2.0.1 |
| Arch Linux | jasper | 2.0.25-1 |
| Red Hat Enterprise Linux 8 | jasper | 0:2.0.14-5.el8 |
| Red Hat Enterprise Linux 8 | jasper-debuginfo | 0:2.0.14-5.el8 |
| Red Hat Enterprise Linux 8 | jasper-debugsource | 0:2.0.14-5.el8 |
| Red Hat Enterprise Linux 8 | jasper-devel | 0:2.0.14-5.el8 |
| Red Hat Enterprise Linux 8 | jasper-libs | 0:2.0.14-5.el8 |
| Red Hat Enterprise Linux 8 | jasper-libs-debuginfo | 0:2.0.14-5.el8 |
| Red Hat Enterprise Linux 8 | jasper-utils-debuginfo | 0:2.0.14-5.el8 |
| Rocky Linux 8 | jasper | 0:2.0.14-5.el8 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | jasper | 2.0.14-150000.3.25.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP3 | jasper | 2.0.14-150000.3.25.1 |
| SUSE Linux Enterprise Real Time 15 SP2 | jasper | 2.0.14-150000.3.25.1 |
| SUSE Linux Enterprise Server 12 SP5 | jasper | 1.900.14-195.31.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | jasper | 1.900.14-195.31.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | jasper | 1.900.14-195.31.1 |
| Ubuntu 16.04 LTS | jasper | no fix |
| openSUSE Leap 15.3 | jasper | 2.0.14-150000.3.25.1 |
| openSUSE Leap 15.4 | jasper | 2.0.14-150000.3.25.1 |
| openSUSE Tumbleweed | jasper | 4.0.0-2.1 |