From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 17772 invoked by alias); 15 Jan 2015 11:41:10 -0000 Mailing-List: contact cygwin-apps-help@cygwin.com; run by ezmlm Precedence: bulk Sender: cygwin-apps-owner@cygwin.com List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Mail-Followup-To: cygwin-apps@cygwin.com Received: (qmail 17666 invoked by uid 89); 15 Jan 2015 11:41:09 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-1.9 required=5.0 tests=BAYES_00,SPF_PASS,T_HK_NAME_DR,T_RP_MATCHES_RCVD,UNPARSEABLE_RELAY autolearn=ham version=3.3.2 X-Spam-User: qpsmtpd, 2 recipients X-HELO: aserp1040.oracle.com Received: from aserp1040.oracle.com (HELO aserp1040.oracle.com) (141.146.126.69) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES256-SHA encrypted) ESMTPS; Thu, 15 Jan 2015 11:41:07 +0000 Received: from ucsinet21.oracle.com (ucsinet21.oracle.com [156.151.31.93]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t0FBf4X4018324 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 15 Jan 2015 11:41:05 GMT Received: from aserz7022.oracle.com (aserz7022.oracle.com [141.146.126.231]) by ucsinet21.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t0FBf38s026263 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Thu, 15 Jan 2015 11:41:04 GMT Received: from abhmp0002.oracle.com (abhmp0002.oracle.com [141.146.116.8]) by aserz7022.oracle.com (8.14.4+Sun/8.14.4) with ESMTP id t0FBf3UF019497; Thu, 15 Jan 2015 11:41:03 GMT Received: from VZELL-LAP.de.oracle.com (/91.51.168.97) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 15 Jan 2015 03:41:03 -0800 To: Yaakov Selkowitz Cc: cygwin-apps@cygwin.com Subject: Re: [SECURITY] jasper References: <54A17F2C.8090208@cygwin.com> From: "Dr. Volker Zell" Date: Thu, 15 Jan 2015 11:41:00 -0000 In-Reply-To: <54A17F2C.8090208@cygwin.com> (Yaakov Selkowitz's message of "Mon, 29 Dec 2014 10:19:56 -0600") Message-ID: <87wq4o5l0x.fsf@VZELL-LAP.de.oracle.com> User-Agent: Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.4.22 (cygwin32) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-IsSubscribed: yes X-SW-Source: 2015-01/txt/msg00046.txt.bz2 >>>>> Yaakov Selkowitz writes: > Dr. Volker Zell, > CVE-2014-9029 has been announced for jasper. A patch is available at: > http://pkgs.fedoraproject.org/cgit/jasper.git/plain/jasper-CVE-2014-9029.patch Actually that patch is already included in the latest cygwin (32/64bit) distros. > Yaakov Ciao Volker