This is the mail archive of the
cygwin-apps
mailing list for the Cygwin project.
[SECURITY] jbigkit (CVE-2013-6369)
- From: "Yaakov (Cygwin/X)" <yselkowitz at users dot sourceforge dot net>
- To: cygwin-apps at cygwin dot com
- Date: Tue, 08 Apr 2014 23:37:13 -0500
- Subject: [SECURITY] jbigkit (CVE-2013-6369)
- Authentication-results: sourceware.org; auth=none
Chuck,
A vulnerability has been announced in jbigkit[1][2]; please either
update to 2.1, or add the following patch to 2.0:
http://pkgs.fedoraproject.org/cgit/jbigkit.git/plain/jbigkit-CVE-2013-6369.patch
TIA,
Yaakov
[1] https://www.cl.cam.ac.uk/~mgk25/jbigkit/CHANGES
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1032273