[Buildroot] [PATCH 2/3] package/jasper: Apply fix for CVE-2018-19542

Peter Korsgaard peter at korsgaard.com
Fri Dec 6 08:21:50 UTC 2019


>>>>> "Michael" == Michael Vetter <jubalh at iodoru.org> writes:

 > Add 0002-check-null-in-jp2_decode.patch:
 > Patch was proposed upstream[1] but upstream is very inactive.
 > Linux distributions use the same fix to patch their packages.

 > 1: https://github.com/mdadams/jasper/pull/200
 > Signed-off-by: Michael Vetter <jubalh at iodoru.org>

Committed to 2019.02.x and 2019.08.x, thanks.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list