Thomas Perale ac9c499ca0 package/jasper: add patch for CVE-2025-8837 ...

Fixes the following vulnerability:

- CVE-2025-8837:
    A vulnerability was identified in JasPer up to 4.2.5. This affects the
    function jpc_dec_dump of the file src/libjasper/jpc/jpc_dec.c of the
    component JPEG2000 File Handler. The manipulation leads to use after
    free. An attack has to be approached locally. The exploit has been
    disclosed to the public and may be used.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2025-8837
  - 8308060d3f

Signed-off-by: Thomas Perale <thomas.perale@mind.be>

2026-02-26 10:20:57 +01:00

..

0001-Fixes-367.patch

…

0002-Fixes-400.patch

…

0003-Fixes-401.patch

…

0004-Fixes-402-403.patch

…

Config.in

…

jasper.hash

…

jasper.mk

…