diff --git a/libjpeg-turbo-3.0.1.tar.gz b/libjpeg-turbo-3.0.1.tar.gz deleted file mode 100644 index 169e873..0000000 --- a/libjpeg-turbo-3.0.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:22429507714ae147b3acacd299e82099fce5d9f456882fc28e252e4579ba2a75 -size 2800900 diff --git a/libjpeg-turbo-3.0.1.tar.gz.sig b/libjpeg-turbo-3.0.1.tar.gz.sig deleted file mode 100644 index 2fa127c..0000000 Binary files a/libjpeg-turbo-3.0.1.tar.gz.sig and /dev/null differ diff --git a/libjpeg-turbo-3.0.2.tar.gz b/libjpeg-turbo-3.0.2.tar.gz new file mode 100644 index 0000000..ae14280 --- /dev/null +++ b/libjpeg-turbo-3.0.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:c2ce515a78d91b09023773ef2770d6b0df77d674e144de80d63e0389b3a15ca6 +size 2831164 diff --git a/libjpeg-turbo-3.0.2.tar.gz.sig b/libjpeg-turbo-3.0.2.tar.gz.sig new file mode 100644 index 0000000..9885788 Binary files /dev/null and b/libjpeg-turbo-3.0.2.tar.gz.sig differ diff --git a/libjpeg-turbo.changes b/libjpeg-turbo.changes index 407b82d..254267d 100644 --- a/libjpeg-turbo.changes +++ b/libjpeg-turbo.changes @@ -1,3 +1,40 @@ +------------------------------------------------------------------- +Mon Feb 5 19:40:36 UTC 2024 - Martin Hauke + +- Update to version 3.0.2 + * Fixed a signed integer overflow in the tj3CompressFromYUV8(), + tj3DecodeYUV8(), tj3DecompressToYUV8(), and tj3EncodeYUV8() + functions, detected by the Clang and GCC undefined behavior + sanitizers, that could be triggered by setting the align + parameter to an unreasonably large value. This issue did not + pose a security threat, but removing the warning made it + easier to detect actual security issues, should they arise in + the future. + * Introduced a new parameter (TJPARAM_MAXMEMORY in the + TurboJPEG C API and TJ.PARAM_MAXMEMORY in the TurboJPEG Java + API) and a corresponding TJBench option (-maxmemory) for + specifying the maximum amount of memory (in megabytes) that + will be allocated for intermediate buffers, which are used + with progressive JPEG compression and decompression, optimized + baseline entropy coding, lossless JPEG compression, and + lossless transformation. The new parameter and option serve + the same purpose as the max_memory_to_use field in the + jpeg_memory_mgr struct in the libjpeg API, the JPEGMEM + environment variable, and the cjpeg/djpeg/jpegtran -maxmemory + option. + * Introduced a new parameter (TJPARAM_MAXPIXELS in the TurboJPEG + C API and TJ.PARAM_MAXPIXELS in the TurboJPEG Java API) and a + corresponding TJBench option (-maxpixels) for specifying the + maximum number of pixels that the decompression, lossless + transformation, and packed-pixel image loading + functions/methods will process. + * Fixed an error ("Unsupported color conversion request") that + occurred when attempting to decompress a 3-component lossless + JPEG image without an Adobe APP14 marker. The decompressor + now assumes that a 3-component lossless JPEG image without an + Adobe APP14 marker uses the RGB colorspace if its component + IDs are 1, 2, and 3. + ------------------------------------------------------------------- Mon Jan 15 15:56:37 UTC 2024 - Andreas Schwab diff --git a/libjpeg-turbo.spec b/libjpeg-turbo.spec index 617cea8..ffe0d92 100644 --- a/libjpeg-turbo.spec +++ b/libjpeg-turbo.spec @@ -1,5 +1,5 @@ # -# spec file +# spec file for package libjpeg-turbo # # Copyright (c) 2024 SUSE LLC # @@ -23,7 +23,7 @@ %define asan_build 0 %define debug_build 0 -%define srcver 3.0.1 +%define srcver 3.0.2 %if "%{flavor}" == "libjpeg-turbo" %define major 8 %define minor 3