{"id":"CLSA-2026-1792442076","summary":"jasper: Fix of 4 CVEs","details":"- Add Amazon Linux 2 ELS support (mirrors centos7els branch with .amzn2 dist\n  via / leapfrog over stock 1.900.1-33.amzn2.0.1)\n- Import CVE-2020-27828 patch from amzn2 stock SRPM (out-of-bounds write in\n  jpc encoder; jasper-2.0.14-CVE-2020-27828.patch)\n- Import CVE-2021-3443 patch from amzn2 stock SRPM (NULL pointer dereference\n  in JP2 component reference handling)\n- Import CVE-2021-3467 patch from amzn2 stock SRPM (NULL pointer dereference\n  in CDEF box channel reference handling)","modified":"2026-10-26T09:31:59.328120976Z","published":"2026-10-19T20:34:50Z","upstream":["CVE-2020-27828","CVE-2021-3443","CVE-2021-3467"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792442076.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26926"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51257"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8836"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8837"}],"affected":[{"package":{"name":"jasper","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/jasper?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.900.1-33.el7.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792442076.json"}},{"package":{"name":"jasper-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/jasper-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.900.1-33.el7.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792442076.json"}},{"package":{"name":"jasper-libs","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/jasper-libs?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.900.1-33.el7.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792442076.json"}},{"package":{"name":"jasper-utils","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/jasper-utils?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.900.1-33.el7.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792442076.json"}}],"schema_version":"1.9.0"}