- Add SHA256792b758ef4
jasper -- multiple vulnerabilitiesentered 2021-03-03
Port details
graphics/jasper 4.2.9
Implementation of the codec specified in the JPEG-2000 standard
Port info
- Maintainer
- sunpoet@FreeBSD.org
- Packages
- latest: 4.2.9
- Upstream
- up to date
- Last update
- to 4.2.9 · 9eba505f01
- Quarterly
- 2026Q4: 4.2.9
- WWW
- https://ece.engr.uvic.ca/~frodo/jasper/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install jasperinstalls 4.2.9 fromlatest; fromquarterly(2026Q4) 4.2.9- Port
# cd /usr/ports/graphics/jasper && make install clean# make -C /usr/ports/graphics/jasper config # change options first
- Size
- 429 KiB download · 931 KiB installed
- Depends on
- graphics/jpeg-turbo 3.1.4.1
- License
- JASPER
- Options
- 1 of 4 on in the package: DOCS
Show the 3 options that are off
HEIF OPENGL TEST
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 4.2.9 | 4.2.9 | – |
| FreeBSD 15 | 4.2.9 | 4.2.9 | – |
| FreeBSD 14 | 4.2.9 | 4.2.9 | 4.2.9 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 4.2.9 | 4.2.9 | – |
| FreeBSD 14 | 4.2.9 | 4.2.9 | 4.2.9 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 4.2.9.Fixed (6)
Show 6 fixed
VuXML entries whose affected range the packaged version has left.
jasper -- heap overflow vulnerabilityentered 2020-12-13
jasper -- multiple vulnerabilitiesentered 2020-08-25
CVE-2016-9398, CVE-2016-9399, CVE-2017-13748, CVE-2017-13750, CVE-2017-13751, CVE-2017-14132, CVE-2017-5499, CVE-2017-5503, CVE-2017-5504, CVE-2017-5505, CVE-2017-9782, CVE-2018-18873, CVE-2018-19139, CVE-2018-19540, CVE-2018-19541, CVE-2018-19543, CVE-2018-20570, CVE-2018-20622, CVE-2018-9055, CVE-2018-9154, CVE-2018-9252
jasper -- multiple vulnerabilitiesentered 2016-02-20
CVE-2014-8137, CVE-2014-8138, CVE-2014-8157, CVE-2014-8158, CVE-2014-9029, CVE-2016-2089
jasper -- multiple vulnerabilitiesentered 2015-08-18
jasper -- buffer overflowentered 2013-04-18
Problem reports (1) · open in Bugzilla, most recently changed first
| PR | Summary | Status | Changed |
|---|---|---|---|
| 294266 | maintainer-feedback? graphics/jasper: Unit tests fails and are missing files | New | 2026-04-05 |
Commits (120)
Mass-conversion to the USE_AUTOTOOLS New World Order. The code present in bsd.autotools.mk essentially makes this a no-op given that all the old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in exactly the same way as USE_AUTOTOOLS itself. Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME team -- all GNOME 2.12.x ports use it. Preliminary documentation can be found at: http://people.FreeBSD.org/~ade/autotools.txt which is in the process of being SGMLized before introduction into the Porters Handbook. Light blue touch-paper. Run.54a0b86543
change the libtool version to use from 1.3 to 1.57f44153281
Apply a big libtool patch to allow porters to use the libtool installed by the libtoolX ports instead of the one included with each port. Ports that set USE_LIBTOOL_VER=X will now use the ports version of libtool instead of the included version. To restore previous behavior, use the new macro, USE_INC_LIBTOOL_VER. Both macros accept the same argument: a libtool version. For example, to use the ports version of libtool-1.5, add the following to your Makefile: USE_LIBTOOL_VER= 15 To use the included version of libtool with extra hacks provided by libtool-1.5, add the following to your Makefile: USE_INC_LIBTOOL_VER= 15 With this change, ports that had to add additional libtool hacks to prevent .la files from being installed or to fix certain threading issues can now delete those hacks (after appropriate testing, of course). PR: 63944 Based on work by:eik and marcus Approved by: ade (autotools maintainer) Tested by: kris on pointyhat Bound to be hidden problems: You bet9e5632dd66
avoid ending up with libjasper-1.701.so.411e8fd3a77
Tidy up whitespace.c0669efed5
- Update to version 1.701.0 PR: ports/65085 Submitted by: Ports Furyce7fbff43d
Whoa there, boy, that's a mighty big commit y'all have there...
Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".
For ports-in-waiting:
USE_LIBTOOL=YES -> USE_LIBTOOL_VER=13
USE_AUTOCONF=YES -> USE_AUTOCONF_VER=213
USE_AUTOMAKE=YES -> USE_AUTOMAKE_VER=14
Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.3f651573ad- Utilize USE_GNOME - Use DOCSDIR PR: ports/62531 Submitted by: Ports Fury7f23383278
SIZEify.0c881ba59c
Upgrade from 1.700.2 to 1.700.5 (released on Oct 4th).289ced7fc4
Let be hohest: I really don't have a time now to properly maintain all these great pieces of software, so that let others with more free time to take over them.10588346d3
Update to 1.700.2.1754e553bd
Clear moonlight beckons. Requiem mors pacem pkg-comment, And be calm ports tree. E Nomini Patri, E Fili, E Spiritu Sancti.7e52725f2a
Fix a typo: log long --> long long. Submitted by: Stacey Roberts <stacey@vickiandstacey.com> BSD <bsd@xtremedev.com> Mike Hardling <mvh@ix.netcom.com>3780b8d857
Update to 1.600.0.090302fe0e
The only master site is down. Add some ImageMagick sites that mirror the jasper distfile. (Time for MASTER_SITE_IMAGEMAGICK?)d495562517
Fix jas_types.h for stable. Maintainer 2 week timeout.902041e909
Update to 1.500.4. PR: 41357 Submitted by: Ports Furyd27783d7bb
Add Jasper - a reference implementation of the image codec specified in the JPEG-2000 standard.0ae00ef685