shield Security update for jasper

SUSE-SLES-16.0-223

This update for jasper fixes the following issues: Update to 4.2.8: - CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high (bsc#1247901). - CVE-2025-8836: Added some missing range checking on several coding parameters in the JPC encoder (bsc#1247902). - CVE-2025-8835: Added a check for a missing color component in the jas_image_chclrspc function (bsc#1247904).

• Release Date
  Jan 30 2026
• References
  Bugzilla: 1247904, 1247901, 1247902
  CVEs: CVE-2025-8836, CVE-2025-8837, CVE-2025-8835
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  jasper
  An Implementation of the JPEG-2000 Standard, Part 1

  4.2.8-160000.1.1 lock rpm

  libjasper7
  JPEG-2000 library

  4.2.8-160000.1.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  jasper
  An Implementation of the JPEG-2000 Standard, Part 1

  4.2.8-160000.1.1 lock rpm

  libjasper7
  JPEG-2000 library

  4.2.8-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  jasper
  An Implementation of the JPEG-2000 Standard, Part 1

  4.2.8-160000.1.1 lock rpm

  libjasper7
  JPEG-2000 library

  4.2.8-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  jasper
  An Implementation of the JPEG-2000 Standard, Part 1

  4.2.8-160000.1.1 lock rpm

  libjasper7
  JPEG-2000 library

  4.2.8-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  jasper
  An Implementation of the JPEG-2000 Standard, Part 1

  4.2.8-160000.1.1 lock rpm

  libjasper7
  JPEG-2000 library

  4.2.8-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  jasper
  An Implementation of the JPEG-2000 Standard, Part 1

  4.2.8-160000.1.1 lock rpm

  libjasper7
  JPEG-2000 library

  4.2.8-160000.1.1 lock rpm