3 Commits

Author SHA256 Message Date
8d98e7d0d2 - Update to 4.0.0:
* Improve static linking (##336).
  * Fix path relocation in mingw environment (#335).
  * Improve logging and build scripts.
  * Improve JPEG-2000 conformance test results.
  * Enable PIC by default.
  * Fix memory leaks in function cmdopts_parse (#332) (CVE-2022-2963).
  * imgcmp:
    + Add quiet (-q) option.
    + Add debug-level option.
    + Fix memory leak.
    imginfo:
    + Add quiet (-q) option.
  * Fix bug in parsing PGX header.
  * Fix integer overflow bug (#345) (CVE-2022-40755).
- Remove jasper-CVE-2022-2963.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/jasper?expand=0&rev=125
2022-11-06 09:22:47 +00:00
b4294b0a56 Accepting request 952208 from home:jubalh:branches:graphics
- Update to 3.0.0:
  * Introducing some API changes please refer to the "News" section
    of the JasPer manuel: https://jasper-software.github.io/jasper-manual
  * Greatly improve documentation.
  * Add support for multithreading.
  * Add some customization points in the library, such as the
    memory allocator and error logging function.
  * Add improved memory usage tracking and limiting.
  * Add experimental partial encoding/decoding support for the
    HEIC format.
  * Fix some longstanding issues in the JasPer I/O streams API.
  * Fix many bugs (e.g., #305, #307, #308, #309, #312, #314, and
    many others not associated with any issue numbers).
- Remove jasper-freeglut.patch: not needed anymore
- Add jasper-cmake-warnings.patch: fix cmake warnings
- Remove legacy provides/obsoletes related to sle11 and bsc#437293

OBS-URL: https://build.opensuse.org/request/show/952208
OBS-URL: https://build.opensuse.org/package/show/graphics/jasper?expand=0&rev=111
2022-02-07 16:14:32 +00:00
28361fd836 - bsc#1117507 CVE-2018-19541: Properly fix heap based overread
in jas_image_depalettize. Original fix caused segfaults.
  Update jasper-CVE-2018-19541.patch

- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents

- Update to 2.0.16:
  * Fix assertion failure JPC_NOMINALGAIN (CVE-2016-9396) (#50)
  * Fix build on Windows 10 (#162)
  * Improve README
  * Fix build with CMake 2.x
  * Add missing dereference operators (#178, #157)
  * Check data in jas_image (CVE-2018-19539) (#196)
- Remove because contained in new release:
  * jasper-CVE-2018-19539.patch
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  * Remove 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
- Run spec-cleaner

- bsc#1117505 CVE-2018-19542:
  * Add jasper-CVE-2018-19542.patch

- bsc#1117511 CVE-2018-19539:
  * Add jasper-CVE-2018-19539.patch

- Added patch:
  * jasper-CVE-2018-9055.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/jasper?expand=0&rev=85
2020-03-17 08:54:41 +00:00