I can create said debdiffs if there is nobody else better to do them.
I'm just not incredibly experienced with this sort of thing (though I
have successfully made debdiffs in the past and had them accepted) and
in the past I was able to provide a debdiff which would then be altered
by the person in the report I was giving it to so that it would be able
to be applied to all currently supported releases rather than just the
one I had made it for. Is there a person like that this time or do I
need to create a separate one for each Ubuntu release?

Also, the patch I found is for the new 2.x.x series, will it be fine if
I apply it to the 1.5.2-3.1 version we currently have here? I haven't
looked far enough into the code yet to see if it would be a problem and
if any other changes are necessary to make it work for the old version,
but maybe I'm not the best person for that job as I am not familiar with
the code for OpenJPEG.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1630702

Title:
  CVE-2016-8332 allows an out-of-bound heap write to occur resulting in
  heap corruption and arbitrary code execution

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openjpeg/+bug/1630702/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to