Re: [opensource-dev] openjpeg 1.4 lib used with second life - CVE

2014-03-21 Thread Henri Beauchamp
On Thu, 20 Mar 2014 21:55:31 +, Phil Wyett wrote: > Hi all, > > SL uses the openjpeg library 1.4. This is quite an aged release. Yes, but newer versions plain fail to decode images in SL... See below. > Has the version bundled with SL been fixed or update arranged for the > known CVE agains

[opensource-dev] openjpeg 1.4 lib used with second life - CVE

2014-03-20 Thread Phil Wyett
Hi all, SL uses the openjpeg library 1.4. This is quite an aged release. Has the version bundled with SL been fixed or update arranged for the known CVE against it? http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3535 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3358 Regards Ph