Updated: {jasper/libjasper1/libjasper-devel}-1.900.22-1: JPEG-2000 codec library

Yaakov Selkowitz yselkowitz@cygwin.com
Thu Jan 12 20:26:00 GMT 2017

On 2017-01-03 08:32, Dr. Volker Zell wrote:
> New versions of 'jasper/libjasper1/libjasper-devel' have been uploaded to a server near you.
>  o Build for cygwin 2.6.1 with gcc-5.4.0
>  o Update to latest version before ABI bump

Not really; the fix therein for CVE-2015-5203 broke ABI on 64-bit 
systems by changing the size of an existing member of a public struct 
(int to size_t), just that they neglected to bump the ABI version until 


For compatibility with packages currently linked with libjasper1, this 
needs to be reverted in part.  Here is what Fedora is currently shipping 
on stable branches:


Then, we could update to 1.900.29, or even 2.0.10 -- which should 
provide libjasper4 -- against which all jasper-dependent packages would 
then have to be rebuilt.


More information about the Cygwin-apps mailing list