Updated Jasper packages has been released for Debian GNU/Linux 7 Extended LTS

Package: jasper
Version: 1.900.1-13+deb7u8
Related CVE: CVE-2018-19540 CVE-2018-19541 CVE-2018-20570 CVE-2018-20584 CVE-2018-20622
Several flaws were corrected in Jasper, a JPEG 2000 image library. Heap-based buffer overflows may lead to memory corruption, the exposure of sensitive information or the execution of arbitrary code.

For Debian 7 Wheezy, these problems have been fixed in version 1.900.1-13+deb7u8.

We recommend that you upgrade your jasper packages.

Further information about Extended LTS security advisories can be found at: https://deb.freexian.com/extended-lts/

  Jasper Security Update for Debian 7