JasPer is an implementation of Part 1 of the JPEG 2000 image compression standard.
Security Fix(es):
jasper: Heap-based buffer overflow in cpcreate() in jpcenc.c (CVE-2020-27828)
jasper: Heap-based buffer over-read in jp2decode() in jp2dec.c (CVE-2021-3272)
jasper: Out of bounds read in jp2decode() in jp2dec.c (CVE-2021-26926)
jasper: NULL pointer dereference in jp2decode() in jp2dec.c (CVE-2021-26927)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.