Accepting request 1144368 from home:mnhauke:branches:openSUSE:Factory

- Update to version 3.0.2
  * Fixed a signed integer overflow in the tj3CompressFromYUV8(),
    tj3DecodeYUV8(), tj3DecompressToYUV8(), and tj3EncodeYUV8()
    functions, detected by the Clang and GCC undefined behavior
    sanitizers, that could be triggered by setting the align
    parameter to an unreasonably large value. This issue did not
    pose a security threat, but removing the warning made it
    easier to detect actual security issues, should they arise in
    the future.
  * Introduced a new parameter (TJPARAM_MAXMEMORY in the
    TurboJPEG C API and TJ.PARAM_MAXMEMORY in the TurboJPEG Java
    API) and a corresponding TJBench option (-maxmemory) for
    specifying the maximum amount of memory (in megabytes) that
    will be allocated for intermediate buffers, which are used
    with progressive JPEG compression and decompression, optimized
    baseline entropy coding, lossless JPEG compression, and
    lossless transformation. The new parameter and option serve
    the same purpose as the max_memory_to_use field in the
    jpeg_memory_mgr struct in the libjpeg API, the JPEGMEM
    environment variable, and the cjpeg/djpeg/jpegtran -maxmemory
    option.
  * Introduced a new parameter (TJPARAM_MAXPIXELS in the TurboJPEG
    C API and TJ.PARAM_MAXPIXELS in the TurboJPEG Java API) and a
    corresponding TJBench option (-maxpixels) for specifying the
    maximum number of pixels that the decompression, lossless
    transformation, and packed-pixel image loading
    functions/methods will process.
  * Fixed an error ("Unsupported color conversion request") that
    occurred when attempting to decompress a 3-component lossless
    JPEG image without an Adobe APP14 marker. The decompressor

OBS-URL: https://build.opensuse.org/request/show/1144368
OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=153

libjpeg-turbo-3.0.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:22429507714ae147b3acacd299e82099fce5d9f456882fc28e252e4579ba2a75
-size 2800900

libjpeg-turbo.changes

@@ -1,3 +1,40 @@
+-------------------------------------------------------------------
+Mon Feb  5 19:40:36 UTC 2024 - Martin Hauke <mardnh@gmx.de>
+
+- Update to version 3.0.2
+  * Fixed a signed integer overflow in the tj3CompressFromYUV8(),
+    tj3DecodeYUV8(), tj3DecompressToYUV8(), and tj3EncodeYUV8()
+    functions, detected by the Clang and GCC undefined behavior
+    sanitizers, that could be triggered by setting the align
+    parameter to an unreasonably large value. This issue did not
+    pose a security threat, but removing the warning made it
+    easier to detect actual security issues, should they arise in
+    the future.
+  * Introduced a new parameter (TJPARAM_MAXMEMORY in the
+    TurboJPEG C API and TJ.PARAM_MAXMEMORY in the TurboJPEG Java
+    API) and a corresponding TJBench option (-maxmemory) for
+    specifying the maximum amount of memory (in megabytes) that
+    will be allocated for intermediate buffers, which are used
+    with progressive JPEG compression and decompression, optimized
+    baseline entropy coding, lossless JPEG compression, and
+    lossless transformation. The new parameter and option serve
+    the same purpose as the max_memory_to_use field in the
+    jpeg_memory_mgr struct in the libjpeg API, the JPEGMEM
+    environment variable, and the cjpeg/djpeg/jpegtran -maxmemory
+    option.
+  * Introduced a new parameter (TJPARAM_MAXPIXELS in the TurboJPEG
+    C API and TJ.PARAM_MAXPIXELS in the TurboJPEG Java API) and a
+    corresponding TJBench option (-maxpixels) for specifying the
+    maximum number of pixels that the decompression, lossless
+    transformation, and packed-pixel image loading
+    functions/methods will process.
+  * Fixed an error ("Unsupported color conversion request") that
+    occurred when attempting to decompress a 3-component lossless
+    JPEG image without an Adobe APP14 marker. The decompressor
+    now assumes that a 3-component lossless JPEG image without an
+    Adobe APP14 marker uses the RGB colorspace if its component
+    IDs are 1, 2, and 3.
+
 -------------------------------------------------------------------
 Mon Jan 15 15:56:37 UTC 2024 - Andreas Schwab <schwab@suse.de>
 

libjpeg-turbo.spec

@@ -1,5 +1,5 @@
 #
-# spec file
+# spec file for package libjpeg-turbo
 #
 # Copyright (c) 2024 SUSE LLC
 #
@@ -23,7 +23,7 @@
 
 %define asan_build 0
 %define debug_build 0
-%define srcver 3.0.1
+%define srcver 3.0.2
 %if "%{flavor}" == "libjpeg-turbo"
 %define major    8
 %define minor    3