- Update to version 1.5.0

+ Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program. 

- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to

OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=59
This commit is contained in:
Ismail Dönmez 2016-06-08 08:11:04 +00:00 committed by Git OBS Bridge
parent 9b7cee55f1
commit 78fc556257
6 changed files with 75 additions and 13 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:521bb5d3043e7ac063ce3026d9a59cc2ab2e9636c655a2515af5f4706122233e
size 1569306

View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:9f397c31a67d2b00ee37597da25898b03eb282ccd87b135a50a69993b6a2035f
size 1654276

View File

@ -1,3 +1,33 @@
-------------------------------------------------------------------
Wed Jun 8 07:53:26 UTC 2016 - idonmez@suse.com
- Update to version 1.5.0
+ Fixed an issue whereby a malformed motion-JPEG frame could
cause the "fast path" of libjpeg-turbo's Huffman decoder to
read from uninitialized memory.
+ Added libjpeg-turbo version and build information to the global
string table of the libjpeg and TurboJPEG API libraries.
+ Fixed a couple of issues in the PPM reader that would cause
buffer overruns in cjpeg if one of the values in a binary
PPM/PGM input file exceeded the maximum value defined in the
file's header. libjpeg-turbo 1.4.2 already included a similar
fix for ASCII PPM/PGM files. Note that these issues were not
security bugs, since they were confined to the cjpeg program
and did not affect any of the libjpeg-turbo libraries.
+ Fixed an issue whereby attempting to decompress a JPEG file with
a corrupt header using the tjDecompressToYUV2() function would
cause the function to abort without returning an error and,
under certain circumstances, corrupt the stack. This only
occurred if tjDecompressToYUV2() was called prior to calling
tjDecompressHeader3(), or if the return value from
tjDecompressHeader3() was ignored (both cases represent
incorrect usage of the TurboJPEG API.)
+ The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
and jpeg_mem_dest() functions in the libjpeg API will now
throw an error if a source/destination manager has already
been assigned to the compress or decompress object by a
different function or by the calling program.
-------------------------------------------------------------------
Thu Oct 8 07:53:53 UTC 2015 - idonmez@suse.com

View File

@ -16,9 +16,9 @@
#
%define srcver 1.4.2
%define srcver 1.5.0
%define major 8
%define minor 0
%define minor 1
%define micro 2
%define libver %{major}.%{minor}.%{micro}
%define tmajor 0
@ -39,6 +39,7 @@ Patch1: libjpeg-turbo-1.3.0-tiff-ojpeg.patch
Patch2: libjpeg-1.4.0-ocloexec.patch
BuildRequires: gcc-c++
BuildRequires: libtool
BuildRequires: pkgconfig
BuildRequires: yasm
Obsoletes: jpeg = 6b
Obsoletes: jpeg = 8.0.1
@ -114,8 +115,6 @@ make test libdir=%{_libdir}
%install
%make_install
# Fix perms
chmod -x README-turbo.txt
# Remove unwanted files
rm -f %{buildroot}%{_libdir}/lib{,turbo}jpeg.la
# Remove docs, we'll select docs manually
@ -131,7 +130,7 @@ rm -rf %{buildroot}%{_datadir}/doc/
%files
%defattr(-,root,root)
%doc README README-turbo.txt change.log ChangeLog.txt
%doc README.md change.log ChangeLog.md
%doc usage.txt wizard.txt
%{_bindir}/*
%doc %{_mandir}/man1/*
@ -151,6 +150,8 @@ rm -rf %{buildroot}%{_datadir}/doc/
%{_includedir}/*.h
%{_libdir}/libjpeg.so
%{_libdir}/libturbojpeg.so
%{_libdir}/pkgconfig/libjpeg.pc
%{_libdir}/pkgconfig/libturbojpeg.pc
%doc coderules.txt jconfig.txt libjpeg.txt structure.txt example.c
%changelog

View File

@ -1,3 +1,33 @@
-------------------------------------------------------------------
Wed Jun 8 07:53:26 UTC 2016 - idonmez@suse.com
- Update to version 1.5.0
+ Fixed an issue whereby a malformed motion-JPEG frame could
cause the "fast path" of libjpeg-turbo's Huffman decoder to
read from uninitialized memory.
+ Added libjpeg-turbo version and build information to the global
string table of the libjpeg and TurboJPEG API libraries.
+ Fixed a couple of issues in the PPM reader that would cause
buffer overruns in cjpeg if one of the values in a binary
PPM/PGM input file exceeded the maximum value defined in the
file's header. libjpeg-turbo 1.4.2 already included a similar
fix for ASCII PPM/PGM files. Note that these issues were not
security bugs, since they were confined to the cjpeg program
and did not affect any of the libjpeg-turbo libraries.
+ Fixed an issue whereby attempting to decompress a JPEG file with
a corrupt header using the tjDecompressToYUV2() function would
cause the function to abort without returning an error and,
under certain circumstances, corrupt the stack. This only
occurred if tjDecompressToYUV2() was called prior to calling
tjDecompressHeader3(), or if the return value from
tjDecompressHeader3() was ignored (both cases represent
incorrect usage of the TurboJPEG API.)
+ The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
and jpeg_mem_dest() functions in the libjpeg API will now
throw an error if a source/destination manager has already
been assigned to the compress or decompress object by a
different function or by the calling program.
-------------------------------------------------------------------
Thu Oct 8 07:56:34 UTC 2015 - idonmez@suse.com

View File

@ -17,9 +17,9 @@
%define major 62
%define minor 1
%define minor 2
%define micro 0
%define srcver 1.4.2
%define srcver 1.5.0
%define libver %{major}.%{minor}.%{micro}
Name: libjpeg62-turbo
@ -35,6 +35,7 @@ Patch1: libjpeg-turbo-1.3.0-tiff-ojpeg.patch
Patch2: libjpeg-1.4.0-ocloexec.patch
BuildRequires: gcc-c++
BuildRequires: libtool
BuildRequires: pkgconfig
BuildRequires: yasm
BuildRoot: %{_tmppath}/%{name}-%{version}-build
Conflicts: jpeg%{major}
@ -94,8 +95,6 @@ make test libdir=%{_libdir}
%install
%make_install
# Fix perms
chmod -x README-turbo.txt
# Remove unwanted files
rm -f %{buildroot}%{_libdir}/lib{,turbo}jpeg.la
rm %{buildroot}%{_bindir}/*
@ -112,7 +111,7 @@ rm -rf %{buildroot}%{_datadir}/doc/
%files
%defattr(-,root,root)
%doc README README-turbo.txt change.log ChangeLog.txt
%doc README.md change.log ChangeLog.md
%doc usage.txt wizard.txt
%files -n libjpeg%{major}
@ -124,6 +123,8 @@ rm -rf %{buildroot}%{_datadir}/doc/
%defattr(-,root,root)
%{_includedir}/*.h
%{_libdir}/libjpeg.so
%{_libdir}/pkgconfig/libjpeg.pc
%{_libdir}/pkgconfig/libturbojpeg.pc
%doc coderules.txt jconfig.txt libjpeg.txt structure.txt example.c
%changelog