[Buildroot] [PATCH] jasper: add patches to fix CVE-2014-8137 and CVE-2014-8138

Peter Korsgaard peter at korsgaard.com
Fri Dec 19 20:42:26 UTC 2014


>>>>> "Gustavo" == Gustavo Zacarias <gustavo at zacarias.com.ar> writes:

 > Fixes:
 > CVE-2014-8137 - double-free in jas_iccattrval_destroy()
 > CVE-2014-8138 - heap overflow in jp2_decode()

 > Signed-off-by: Gustavo Zacarias <gustavo at zacarias.com.ar>

Committed, thanks.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list