From 6b08fa38b137b98d0d857d90c19a32301b41a2e116ee4764856a64e80f05b773 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ismail=20D=C3=B6nmez?= Date: Wed, 21 Sep 2016 11:02:46 +0000 Subject: [PATCH] - Update to version 1.5.1 + Fix for PowerPC platforms lacking AltiVec instructions + Fix ABI problem with clang/llvm on aarch64. + Fancy upsampling is now supported when decompressing JPEG images that use 4:4:0 (h1v2) chroma subsampling. + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB conversion is, then libjpeg-turbo will now disable merged upsampling when decompressing YCbCr JPEG images into RGB or extended RGB output images. This significantly speeds up the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms if fancy upsampling is not used (for example, if the -nosmooth option to djpeg is specified.) + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG images with 2x2 luminance sampling factors and 2x1 or 1x2 chrominance sampling factors. + Fixed an unsigned integer overflow in the libjpeg memory manager. + Fixed additional negative left shifts and other issues reported by the GCC and Clang undefined behavior sanitizers when attempting to decompress specially-crafted malformed JPEG images. None of these issues posed a security threat, but removing the warnings makes it easier to detect actual security issues, should they arise in the future. + Fixed an out-of-bounds array reference, introduced by 1.4.902 and detected by the Clang undefined behavior sanitizer, that could be triggered by a specially-crafted malformed JPEG image with more than four components. Because the out-of-bounds reference was still within the same structure, it was not known to pose a security threat, but removing the warning makes it easier to detect actual security issues, should they arise in the future. OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=61 --- libjpeg-turbo-1.5.0.tar.gz | 3 --- libjpeg-turbo-1.5.1.tar.gz | 3 +++ libjpeg-turbo.changes | 34 ++++++++++++++++++++++++++++++++++ libjpeg-turbo.spec | 2 +- libjpeg62-turbo.changes | 34 ++++++++++++++++++++++++++++++++++ libjpeg62-turbo.spec | 2 +- 6 files changed, 73 insertions(+), 5 deletions(-) delete mode 100644 libjpeg-turbo-1.5.0.tar.gz create mode 100644 libjpeg-turbo-1.5.1.tar.gz diff --git a/libjpeg-turbo-1.5.0.tar.gz b/libjpeg-turbo-1.5.0.tar.gz deleted file mode 100644 index 98b147a..0000000 --- a/libjpeg-turbo-1.5.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:9f397c31a67d2b00ee37597da25898b03eb282ccd87b135a50a69993b6a2035f -size 1654276 diff --git a/libjpeg-turbo-1.5.1.tar.gz b/libjpeg-turbo-1.5.1.tar.gz new file mode 100644 index 0000000..5198c63 --- /dev/null +++ b/libjpeg-turbo-1.5.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:41429d3d253017433f66e3d472b8c7d998491d2f41caa7306b8d9a6f2a2c666c +size 1650647 diff --git a/libjpeg-turbo.changes b/libjpeg-turbo.changes index 70676e3..2a2b33c 100644 --- a/libjpeg-turbo.changes +++ b/libjpeg-turbo.changes @@ -1,3 +1,37 @@ +------------------------------------------------------------------- +Wed Sep 21 10:50:36 UTC 2016 - idonmez@suse.com + +- Update to version 1.5.1 + + Fix for PowerPC platforms lacking AltiVec instructions + + Fix ABI problem with clang/llvm on aarch64. + + Fancy upsampling is now supported when decompressing JPEG + images that use 4:4:0 (h1v2) chroma subsampling. + + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB + conversion is, then libjpeg-turbo will now disable merged + upsampling when decompressing YCbCr JPEG images into RGB + or extended RGB output images. This significantly speeds up + the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms + if fancy upsampling is not used + (for example, if the -nosmooth option to djpeg is specified.) + + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG + images with 2x2 luminance sampling factors and 2x1 or 1x2 + chrominance sampling factors. + + Fixed an unsigned integer overflow in the libjpeg memory manager. + + Fixed additional negative left shifts and other issues reported + by the GCC and Clang undefined behavior sanitizers when + attempting to decompress specially-crafted malformed JPEG + images. None of these issues posed a security threat, but + removing the warnings makes it easier to detect actual + security issues, should they arise in the future. + + Fixed an out-of-bounds array reference, introduced by + 1.4.902 and detected by the Clang undefined behavior sanitizer, + that could be triggered by a specially-crafted malformed + JPEG image with more than four components. Because the + out-of-bounds reference was still within the same structure, + it was not known to pose a security threat, but removing + the warning makes it easier to detect actual security issues, + should they arise in the future. + ------------------------------------------------------------------- Wed Jun 8 07:53:26 UTC 2016 - idonmez@suse.com diff --git a/libjpeg-turbo.spec b/libjpeg-turbo.spec index 25a6753..94cc1de 100644 --- a/libjpeg-turbo.spec +++ b/libjpeg-turbo.spec @@ -16,7 +16,7 @@ # -%define srcver 1.5.0 +%define srcver 1.5.1 %define major 8 %define minor 1 %define micro 2 diff --git a/libjpeg62-turbo.changes b/libjpeg62-turbo.changes index 6b1e8ea..4f41bcd 100644 --- a/libjpeg62-turbo.changes +++ b/libjpeg62-turbo.changes @@ -1,3 +1,37 @@ +------------------------------------------------------------------- +Wed Sep 21 10:50:36 UTC 2016 - idonmez@suse.com + +- Update to version 1.5.1 + + Fix for PowerPC platforms lacking AltiVec instructions + + Fix ABI problem with clang/llvm on aarch64. + + Fancy upsampling is now supported when decompressing JPEG + images that use 4:4:0 (h1v2) chroma subsampling. + + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB + conversion is, then libjpeg-turbo will now disable merged + upsampling when decompressing YCbCr JPEG images into RGB + or extended RGB output images. This significantly speeds up + the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms + if fancy upsampling is not used + (for example, if the -nosmooth option to djpeg is specified.) + + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG + images with 2x2 luminance sampling factors and 2x1 or 1x2 + chrominance sampling factors. + + Fixed an unsigned integer overflow in the libjpeg memory manager. + + Fixed additional negative left shifts and other issues reported + by the GCC and Clang undefined behavior sanitizers when + attempting to decompress specially-crafted malformed JPEG + images. None of these issues posed a security threat, but + removing the warnings makes it easier to detect actual + security issues, should they arise in the future. + + Fixed an out-of-bounds array reference, introduced by + 1.4.902 and detected by the Clang undefined behavior sanitizer, + that could be triggered by a specially-crafted malformed + JPEG image with more than four components. Because the + out-of-bounds reference was still within the same structure, + it was not known to pose a security threat, but removing + the warning makes it easier to detect actual security issues, + should they arise in the future. + ------------------------------------------------------------------- Wed Jun 8 07:53:26 UTC 2016 - idonmez@suse.com diff --git a/libjpeg62-turbo.spec b/libjpeg62-turbo.spec index 673351a..3696233 100644 --- a/libjpeg62-turbo.spec +++ b/libjpeg62-turbo.spec @@ -19,7 +19,7 @@ %define major 62 %define minor 2 %define micro 0 -%define srcver 1.5.0 +%define srcver 1.5.1 %define libver %{major}.%{minor}.%{micro} Name: libjpeg62-turbo