[CLSA-2025:1765378381] jasper: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-20 18:44:22 UTC
Description:
- CVE-2025-8836: fix manipulation in function jpc_floorlog2 to prevent reachable assertion
CVEs fixed:
Updated packages:
  • jasper-2.0.28-3.el9.tuxcare.els4.aarch64.rpm
    sha:b659f3196c99493bbf2879562ce3e9435b3539328148c73b90c22fa2f35f93aa
  • jasper-2.0.28-3.el9.tuxcare.els4.i686.rpm
    sha:84e414b35abb20eee7173584869b12654685978e72e8c59e9f587705ea6f6784
  • jasper-2.0.28-3.el9.tuxcare.els4.x86_64.rpm
    sha:df50459b8fcb49c3caa34b1ba0fd3db61bd25779109ce832a1829ca8ab667592
  • jasper-devel-2.0.28-3.el9.tuxcare.els4.aarch64.rpm
    sha:92ba27029439756edb4ac1a38bea4bc77e5679e6a417d68d42420521edc81616
  • jasper-devel-2.0.28-3.el9.tuxcare.els4.i686.rpm
    sha:f3ae8ae7ca639926ebcf630b80f2f67d35f8050c06be83661272f1e1df5f65bb
  • jasper-devel-2.0.28-3.el9.tuxcare.els4.x86_64.rpm
    sha:639f60b35d00d054ae586db35f7f4e5215c97dfd43ee2e0736c45309925c515a
  • jasper-libs-2.0.28-3.el9.tuxcare.els4.aarch64.rpm
    sha:71f9f6e37bd993f327b04b0777b9f1cf8d91e4e4e09eb2778dca6a0fddeba3f1
  • jasper-libs-2.0.28-3.el9.tuxcare.els4.i686.rpm
    sha:fc1c10831fd97a7000d3da6740433e8081939b2041df24b61026e5eca497b71a
  • jasper-libs-2.0.28-3.el9.tuxcare.els4.x86_64.rpm
    sha:e3fb925a2e68395b6d620e124b82d33bab1f0ee115395a9e31afee7818554e48
  • jasper-utils-2.0.28-3.el9.tuxcare.els4.aarch64.rpm
    sha:2d1edd54417565c95602d32e9c17613d77cd9e7e8f79b0a936ab630958f12b65
  • jasper-utils-2.0.28-3.el9.tuxcare.els4.i686.rpm
    sha:7698c55b6e8774d5c0cfa70619154db2fb02c9eb47b549eb8d2ec9fd6bad281b
  • jasper-utils-2.0.28-3.el9.tuxcare.els4.x86_64.rpm
    sha:e206ff48c8347dc9eac652922bf3655615837aa719b5ff2841f6a0e7e5de60d2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.