[arch-general] JasPer vulnerabilities
lonewolf at xs4all.nl
Mon Mar 7 11:58:24 UTC 2016
On 07-03-16 10:55, Harrison Wells wrote:
> Is the package JasPer in extra repo vulnerable to CVE-2016-1577,
> CVE-2016-2089 and CVE-2016-2116? I noticed that the version number of
> JasPer is same in Debian, Ubuntu and Arch, i.e. 1.900.1. Debian and Ubuntu
> seem to have updated/patched it, is Arch not vulnerable to it?
> With regards,
> Harrison Wells
The most recent added patch appears to be jasper-1.900.1-CVE-2015-5203 .
I suggest you report this to arch-security mailinglist,
More information about the arch-general