openEuler-SA-2026-2995

Synopsis:

jbig2dec security updateSummary:

An update for jbig2dec is now available for openEuler-20.03-LTS-SP4Description:

jbig2dec is a decoder implementation of the JBIG2 image compression format.

Security Fix(es):

An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input.(CVE-2026-38076)Topic:

An update for jbig2dec is now available for openEuler-20.03-LTS-SP4.

openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.Severity:

HighAffected Component:

jbig2dec