Commit Graph

1 Commits

Author SHA1 Message Date
Gustavo Zacarias
b6e4e9de41 jasper: add patches to fix CVE-2014-8137 and CVE-2014-8138
Fixes:
CVE-2014-8137 - double-free in jas_iccattrval_destroy()
CVE-2014-8138 - heap overflow in jp2_decode()

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-12-19 21:41:17 +01:00