ELA-461-1 jasper security update

divide by zero

2021-07-22
Packagejasper
Version1.900.1-debian1-2.4+deb8u11
Related CVEs CVE-2021-27845


An issue has been found in jasper, a JPEG-2000 runtime library. A Divide-by-zero vulnerability exists in JasPer Image Coding Toolkit 2.0 in jasper/src/libjasper/jpc/jpc_enc.c



For Debian 8 jessie, these problems have been fixed in version 1.900.1-debian1-2.4+deb8u11.

We recommend that you upgrade your jasper packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.