>>>>> Yaakov Selkowitz writes: > Dr. Volker Zell, > CVE-2014-9029 has been announced for jasper. A patch is available at: > http://pkgs.fedoraproject.org/cgit/jasper.git/plain/jasper-CVE-2014-9029.patch Actually that patch is already included in the latest cygwin (32/64bit) distros. > Yaakov Ciao Volker