23c384d425
accesses if the debug level is set sufficiently high (#402, #403) bsc#1247901 (CVE-2025-8837) the JPC encoder (#401) bsc#1247902 (CVE-2025-8836) function (#400) (CVE-2025-8835).
Michael Vetter2025-08-14 05:54:41 +00:00
3b774298fc
- Update to 4.2.8: * Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high (#402, #403).
Michael Vetter2025-08-06 05:37:39 +00:00
0b95cbe3f6
- Update to 4.2.7: * Added some missing range checking on several coding parameters in the JPC encoder (#401).
Michael Vetter2025-08-04 06:42:45 +00:00
5af32b4a90
Accepting request 1256340 from graphics
Ana Guerrero2025-03-27 21:31:36 +00:00
49a1c3f8d3
- Update to 4.2.5: * Made a change to a configuration header file in order to avoid undesirable compiler warnings when JasPer is used in C++ code (#393).
Michael Vetter2025-03-26 21:56:37 +00:00
2eea89a366
- Update to 4.2.4: * Added some missing checks to the jas_heic_decode function in the HEIC codec (#383).
Michael Vetter2024-04-27 19:31:54 +00:00
fbd774ccf9
Accepting request 1169268 from graphics
Ana Guerrero2024-04-21 18:26:34 +00:00
59ac7dc8a9
* Added a missing check in the JPC codec (#381) bsc#1223155 (CVE-2024-31744)
Michael Vetter2024-04-19 17:26:40 +00:00
3e52d8fa1c
Accepting request 1163808 from graphics
Ana Guerrero2024-04-02 14:37:45 +00:00
a6e4817b7c
- Update to 4.2.3: * Added a missing check in the JPC codec (#381).
Michael Vetter2024-03-31 20:58:02 +00:00
3dc2599b53
Accepting request 1157079 from graphics
Ana Guerrero2024-03-13 21:16:37 +00:00
4897abebdc
Accepting request 1147689 from graphics
Ana Guerrero2024-02-21 16:52:03 +00:00
3df7242ea1
- Update to 4.2.1: * Fix a build problem for the DJGPP/MS-DOS environment (#372).
Michael Vetter2024-02-20 05:54:45 +00:00
241debdf3c
Accepting request 1144460 from graphics
Ana Guerrero2024-02-06 15:33:54 +00:00
5ee6445079
- Update to 4.2.0: * Add the JAS_PACKAGING option to the CMake build in an attempt to allow easier control over rpath settings by packagers of JasPer. * Remove a number of obsolete scripts. * Make some cosmetic changes to the code for the JPC codec in order to improve readability (#371). * Fix a portability bug related to threads/atomics. * Replace some lingering uses of strtok in the JPC coder with jas_strtok, since the use of strtok is problematic in multithreading contexts.
Michael Vetter2024-02-06 07:13:07 +00:00
dddfb428ca
Accepting request 1138803 from graphics
Ana Guerrero2024-01-15 21:15:26 +00:00
cf694b7c5e
Accepting request 1138151 from graphics
Ana Guerrero2024-01-12 22:44:53 +00:00
f136385bee
- Update to 4.1.2: * Fix invalid memory write bug (#367) (CVE-2023-51257). * Fix missing range check in the JPC encoder (#368).
Michael Vetter2024-01-11 15:55:23 +00:00
65382abadf
Accepting request 1129748 from graphics
Ana Guerrero2023-11-30 20:59:21 +00:00
18e1243963
- Update to 4.1.1: * Disallow in-source builds by default #364 * Fix a potential integer overflow problem in the jas_get_total_mem_size function (for the Windows platform) #363Michael Vetter2023-11-29 09:36:52 +00:00
43a67cf77e
Accepting request 1123411 from graphics
Ana Guerrero2023-11-06 20:13:42 +00:00
f07d451a77
- Update to 4.1.0: * Add support for building several JasPer application programs for WebAssembly target with WASI support.
Michael Vetter2023-11-05 13:32:57 +00:00
da6a0439fb
Accepting request 1121278 from graphics
Ana Guerrero2023-10-31 19:25:07 +00:00
2df10131fc
- Update to 3.0.4: * Eliminate some bogus calls to abort. * Fix a typo in jas_safeui64_div (#323). * Add some additional logging messages. * Fix the source of a potential compiler warning (#321).
Michael Vetter2022-06-03 12:45:00 +00:00
0624545993
- Update to 3.0.1: * Fix some build/portability issues (e.g., #317, #318). - Drop jasper-cmake-warnings.patch: contained in upstream release
Michael Vetter2022-02-12 21:18:18 +00:00
7dd1298a35
Accepting request 950018 from home:Kieltux:branches:graphics
Michael Vetter2022-02-01 12:22:03 +00:00
0d0b2e0951
Accepting request 912351 from graphics
Richard Brown
2021-08-18 06:55:45 +00:00
91f0dc2e4b
- Update to 2.0.33: * Fix a JP2/JPC decoder bug (#291) * Fix a build issue impacting some platforms (#296)
Michael Vetter2021-08-16 07:06:14 +00:00
50cfb433a3
- Update to 2.0.32: * Between 2.0.29 and 2.0.32 were only experiments with GitHub Actions
Michael Vetter2021-04-19 11:40:44 +00:00
b3d7c084d0
Accepting request 882023 from graphics
Richard Brown
2021-04-01 12:17:16 +00:00
903b41e723
- Update to 2.0.28: * Fix potential null pointer dereference in the JP2/JPC decoder. (#269) * Fix ignoring of JAS_STREAM_FILEOBJ_NOCLOSE at stream close time. (#286) * Fix integral type sizing problem in JP2 codec. (#284)
Michael Vetter2021-03-29 17:10:40 +00:00
023dac1234
- Update to 2.0.27: * Check for an image containing no samples in the PGX decoder. (#271, #272, #273, #274, #275, #276, #281) * Check for dimensions of zero in the JPC and JPEG decoders. * Fix an arguably incorrect type for an integer literal in the PGX decoder. (#270) * Check for an invalid component reference in the JP2 decoder. (#269) * Check on integer size in JP2 decoder. (#278)
Michael Vetter2021-03-18 11:36:55 +00:00
500548f3b5
- Update to 2.0.26: * Fix JP2 decoder bug that can cause a null pointer dereference for some invalid CDEF boxes. (#268)
Michael Vetter2021-03-05 15:44:48 +00:00
df46b92620
- Update to 2.0.25: * Fix memory-related bugs in the JPEG-2000 codec resulting from attempting to decode invalid code streams. (#264, #265) * Fix wrong return value under some compilers (#260) * Fix bsc#1181483 CVE-2021-3272 heap buffer overflow in jp2_decode (#259)
Michael Vetter2021-02-08 09:13:17 +00:00
ecaa42925d
- Update to 2.0.24: * Add JAS_VERSION_MAJOR, JAS_VERSION_MINOR, JAS_VERSION_PATCH for easier access to the JasPer version. * Fixes stack overflow bug on Windows, where variable-length arrays are not available. (#256)
Michael Vetter2021-01-04 09:20:35 +00:00
9762306c78
- Update to 2.0.20: * Fixed several ISO/IEC 15444-4 conformance bugs * Fixed new variant of CVE-2016-9398 * Disabled the MIF codec by default for security reasons (but it is still included in the library); in a future release, the MIF codec may also be excluded from the library by default * Added documentation for the I/O streams library API * Improved adherance to specification - Move to GitHub repo https://github.com/jasper-software/jasper - Update URL to https://jasper-software.github.io/jasperMichael Vetter2020-09-07 08:19:33 +00:00
5fdd768381
- bsc#1092115 CVE-2018-9154: Fix possible denial of service Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()
Michael Vetter2020-03-17 12:56:29 +00:00
28361fd836
- bsc#1117507 CVE-2018-19541: Properly fix heap based overread in jas_image_depalettize. Original fix caused segfaults. Update jasper-CVE-2018-19541.patch
Michael Vetter2020-03-17 08:54:41 +00:00
Dominique Leuenberger
Michael Vetter
Ana Guerrero
Richard Brown
Richard Brown