CVE-2020-27828

JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard.

Security Fix(es):

• jasper: Heap-based buffer overflow in cp_create() in jpc_enc.c (CVE-2020-27828)

• jasper: Heap-based buffer over-read in jp2_decode() in jp2_dec.c (CVE-2021-3272)

• jasper: Out of bounds read in jp2_decode() in jp2_dec.c (CVE-2021-26926)

• jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c (CVE-2021-26927)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability.

JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard.

Security Fix(es):

• jasper: Heap-based buffer overflow in cp_create() in jpc_enc.c (CVE-2020-27828)

• jasper: Heap-based buffer over-read in jp2_decode() in jp2_dec.c (CVE-2021-3272)

• jasper: Out of bounds read in jp2_decode() in jp2_dec.c (CVE-2021-26926)

• jasper: NULL pointer dereference in jp2_decode() in jp2_dec.c (CVE-2021-26927)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

• Add Amazon Linux 2 ELS support (mirrors centos7els branch with .amzn2 dist via / leapfrog over stock 1.900.1-33.amzn2.0.1)
• Import CVE-2020-27828 patch from amzn2 stock SRPM (out-of-bounds write in jpc encoder; jasper-2.0.14-CVE-2020-27828.patch)
• Import CVE-2021-3443 patch from amzn2 stock SRPM (NULL pointer dereference in JP2 component reference handling)
• Import CVE-2021-3467 patch from amzn2 stock SRPM (NULL pointer dereference in CDEF box channel reference handling)

• Add Amazon Linux 2 ELS support (mirrors centos7els branch with .amzn2 dist via / leapfrog over stock 1.900.1-33.amzn2.0.1)
• Import CVE-2020-27828 patch from amzn2 stock SRPM (out-of-bounds write in jpc encoder; jasper-2.0.14-CVE-2020-27828.patch)
• Import CVE-2021-3443 patch from amzn2 stock SRPM (NULL pointer dereference in JP2 component reference handling)
• Import CVE-2021-3467 patch from amzn2 stock SRPM (NULL pointer dereference in CDEF box channel reference handling)

• Add Amazon Linux 2 ELS support (mirrors centos7els branch with .amzn2 dist via / leapfrog over stock 1.900.1-33.amzn2.0.1)
• Import CVE-2020-27828 patch from amzn2 stock SRPM (out-of-bounds write in jpc encoder; jasper-2.0.14-CVE-2020-27828.patch)
• Import CVE-2021-3443 patch from amzn2 stock SRPM (NULL pointer dereference in JP2 component reference handling)
• Import CVE-2021-3467 patch from amzn2 stock SRPM (NULL pointer dereference in CDEF box channel reference handling)

There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability (CVE-2020-27828).

This update for jasper fixes the following issues:

• bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
• bsc#1181483 CVE-2021-3272: Fix buffer over-read in jp2_decode

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the jasper-2.0.33-1.2 package on the GA media of openSUSE Tumbleweed.

This update for jasper fixes the following issues:

• bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
• bsc#1181483 CVE-2021-3272: Fix buffer over-read in jp2_decode

This update for jasper fixes the following issues:

• bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
• bsc#1181483 CVE-2021-3272: Fix buffer over-read in jp2_decode

This update for jasper fixes the following issues:

• bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
• bsc#1181483 CVE-2021-3272: Fix buffer over-read in jp2_decode

It was discovered that Jasper incorrectly certain files. An attacker could possibly use this issue to cause a crash. (CVE-2018-18873)

It was discovered that Jasper incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-19542)

It was discovered that Jasper incorrectly handled certain JPC encoders. An attacker could possibly use this issue to execute arbitrary code. (CVE-2020-27828)

It was discovered that Jasper incorrectly handled certain images. An attacker could possibly use this issue to expose sensitive information or cause a crash. (CVE-2017-9782)