This is the mail archive of the
cygwin-apps
mailing list for the Cygwin project.
[SECURITY] jasper
- From: Yaakov Selkowitz <yselkowitz at cygwin dot com>
- To: cygwin-apps at cygwin dot com
- Date: Mon, 26 Sep 2016 00:18:11 -0500
- Subject: [SECURITY] jasper
- Authentication-results: sourceware.org; auth=none
Dr. Volker,
Several CVEs have been made public for jasper. Could you please ship a
new release with the following patches:
http://pkgs.fedoraproject.org/cgit/rpms/jasper.git/plain/jasper-CVE-2014-8157.patch
http://pkgs.fedoraproject.org/cgit/rpms/jasper.git/plain/jasper-CVE-2014-8158.patch
http://pkgs.fedoraproject.org/cgit/rpms/jasper.git/plain/jasper-CVE-2015-5221.patch
http://pkgs.fedoraproject.org/cgit/rpms/jasper.git/plain/jasper-CVE-2016-1867.patch
http://pkgs.fedoraproject.org/cgit/rpms/jasper.git/plain/jasper-CVE-2016-1577.patch
http://pkgs.fedoraproject.org/cgit/rpms/jasper.git/plain/jasper-CVE-2016-2116.patch
--
Yaakov