SUSE-SU-2022:1479-1

Details

This update for jasper fixes the following issues:

CVE-2021-3467: Fixed NULL pointer deref in jp2_decode() (bsc#1184757).
CVE-2021-3443: Fixed NULL pointer deref in jp2_decode() (bsc#1184798).
CVE-2021-26927: Fixed NULL pointer deref in jp2_decode() (bsc#1182104).
CVE-2021-26926: Fixed an out of bounds read in jp2_decode() (bsc#1182105).

Affected Packages

SUSE:Linux Enterprise Module for Basesystem 15 SP3jasper

Fixed in:

2.0.14-150000.3.25.1

SUSE:Linux Enterprise Module for Basesystem 15 SP3libjasper4

Fixed in:

2.0.14-150000.3.25.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP3jasper

Fixed in:

2.0.14-150000.3.25.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP3libjasper-devel

Fixed in:

2.0.14-150000.3.25.1

SUSE:Linux Enterprise Real Time 15 SP2jasper

Fixed in:

2.0.14-150000.3.25.1

SUSE:Linux Enterprise Real Time 15 SP2libjasper-devel

Fixed in:

2.0.14-150000.3.25.1

SUSE:Linux Enterprise Real Time 15 SP2libjasper4

Fixed in:

2.0.14-150000.3.25.1

openSUSE:Leap 15.3jasper

Fixed in:

2.0.14-150000.3.25.1

openSUSE:Leap 15.3libjasper-devel

Fixed in:

2.0.14-150000.3.25.1

openSUSE:Leap 15.3libjasper4

Fixed in:

2.0.14-150000.3.25.1

openSUSE:Leap 15.3libjasper4-32bit

Fixed in:

2.0.14-150000.3.25.1

openSUSE:Leap 15.4jasper

Fixed in:

2.0.14-150000.3.25.1

openSUSE:Leap 15.4libjasper-devel

Fixed in:

2.0.14-150000.3.25.1

openSUSE:Leap 15.4libjasper4

Fixed in:

2.0.14-150000.3.25.1

openSUSE:Leap 15.4libjasper4-32bit

Fixed in:

2.0.14-150000.3.25.1

References

REPORThttps://bugzilla.suse.com/1182104 REPORThttps://bugzilla.suse.com/1182105 REPORThttps://bugzilla.suse.com/1184757 REPORThttps://bugzilla.suse.com/1184798 WEBhttps://www.suse.com/security/cve/CVE-2021-26926 WEBhttps://www.suse.com/security/cve/CVE-2021-26927 WEBhttps://www.suse.com/security/cve/CVE-2021-3443 WEBhttps://www.suse.com/security/cve/CVE-2021-3467 ADVISORYhttps://www.suse.com/support/update/announcement/2022/suse-su-20221479-1/

SUSE-SU-2022:1479-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline