|Related CVEs||CVE-2021-26926 CVE-2021-26927|
A heap buffer overflow vulnerability was discovered in JasPer, through jp2_dec.c in the jp2_decode() function.
A null pointer access was discovered in JasPer, through jp2_dec.c in the jp2_decode() function.
For Debian 8 jessie, these problems have been fixed in version 1.900.1-debian1-2.4+deb8u9.
We recommend that you upgrade your jasper packages.
Further information about Extended LTS security advisories can be found at: debian Extended Long term support