Commit Graph

22 Commits

Author SHA256 Message Date
6a32bbef39 - security update:
* CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]

- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]

OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=75
2018-06-13 07:38:59 +00:00
14882e0733 - update to version 1.5.3
1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).

OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=72
2017-12-18 13:08:44 +00:00
200c331ef4 - security update:
* CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch

- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=70
2017-10-12 11:25:22 +00:00
39d197e0da - Update to version 1.5.2
+ Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr, 
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or 
    multi-pass (including progressive) compression. This limit 
    can also be set using the JPEGMEM environment variable or 
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to 
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred 
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.

- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the

OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=69
2017-10-12 10:36:08 +00:00
c25d5e05de Accepting request 532986 from home:scarabeus_iv:branches:graphics
Mention eco fate number for backport to sle12

OBS-URL: https://build.opensuse.org/request/show/532986
OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=67
2017-10-10 11:34:26 +00:00
OBS User mrdocs
bec118ee3b Accepting request 503929 from home:jbohac:branches:graphics
- mention the included utilities (djpeg, jpegtran, rdjpgcom, 
  tjbench, and wrjpgcom) in the package description.

OBS-URL: https://build.opensuse.org/request/show/503929
OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=65
2017-06-18 00:30:58 +00:00
Ismail Dönmez
a4655283d1 Accepting request 451086 from home:bmwiedemann:reproducible
set build date to enable reproducible builds

OBS-URL: https://build.opensuse.org/request/show/451086
OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=63
2017-01-18 15:59:51 +00:00
Ismail Dönmez
6b08fa38b1 - Update to version 1.5.1
+ Fix for PowerPC platforms lacking AltiVec instructions
  + Fix ABI problem with clang/llvm on aarch64.
  + Fancy upsampling is now supported when decompressing JPEG
    images that use 4:4:0 (h1v2) chroma subsampling.
  + If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
    conversion is, then libjpeg-turbo will now disable merged
    upsampling when decompressing YCbCr JPEG images into RGB
    or extended RGB output images. This significantly speeds up
    the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
    if fancy upsampling is not used 
    (for example, if the -nosmooth option to djpeg is specified.)
  + The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
    images with 2x2 luminance sampling factors and 2x1 or 1x2
    chrominance sampling factors.
  + Fixed an unsigned integer overflow in the libjpeg memory manager.
  + Fixed additional negative left shifts and other issues reported
    by the GCC and Clang undefined behavior sanitizers when
    attempting to decompress specially-crafted malformed JPEG
    images. None of these issues posed a security threat, but
    removing the warnings makes it easier to detect actual
    security issues, should they arise in the future.
  + Fixed an out-of-bounds array reference, introduced by
    1.4.902 and detected by the Clang undefined behavior sanitizer,
    that could be triggered by a specially-crafted malformed
    JPEG image with more than four components. Because the
    out-of-bounds reference was still within the same structure,
    it was not known to pose a security threat, but removing
    the warning makes it easier to detect actual security issues,
    should they arise in the future.

OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=61
2016-09-21 11:02:46 +00:00
Ismail Dönmez
78fc556257 - Update to version 1.5.0
+ Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to
    read from uninitialized memory.
  + Added libjpeg-turbo version and build information to the global
    string table of the libjpeg and TurboJPEG API libraries.
  + Fixed a couple of issues in the PPM reader that would cause
    buffer overruns in cjpeg if one of the values in a binary
    PPM/PGM input file exceeded the maximum value defined in the
    file's header. libjpeg-turbo 1.4.2 already included a similar
    fix for ASCII PPM/PGM files. Note that these issues were not
    security bugs, since they were confined to the cjpeg program
    and did not affect any of the libjpeg-turbo libraries.
  + Fixed an issue whereby attempting to decompress a JPEG file with
    a corrupt header using the tjDecompressToYUV2() function would
    cause the function to abort without returning an error and,
    under certain circumstances, corrupt the stack. This only
    occurred if tjDecompressToYUV2() was called prior to calling
    tjDecompressHeader3(), or if the return value from
    tjDecompressHeader3() was ignored (both cases represent
    incorrect usage of the TurboJPEG API.)
  + The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
    and jpeg_mem_dest() functions in the libjpeg API will now
    throw an error if a source/destination manager has already
    been assigned to the compress or decompress object by a
    different function or by the calling program. 

- Update to version 1.5.0
  + Fixed an issue whereby a malformed motion-JPEG frame could
    cause the "fast path" of libjpeg-turbo's Huffman decoder to

OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=59
2016-06-08 08:11:04 +00:00
Ismail Dönmez
216819ba21 - Update to version 1.4.2
+ Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
- Drop libjpeg-turbo-remove-test.patch, fixed upstream.

- Update to version 1.4.2
  + Crash fixes
  + clang compatibility fixes
  + See the included ChangeLog.txt for the details
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.

OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=56
2015-10-08 08:08:09 +00:00
bdb19a8a8e Accepting request 289799 from home:jengelh:branches:graphics
- Remove useless same-name provides. Use download URLs not
  dependent on directory structure.

OBS-URL: https://build.opensuse.org/request/show/289799
OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=54
2015-03-10 13:14:39 +00:00
391b31016e Accepting request 288518 from home:michel_mno:branches:graphics
-  Remove float tests with new libjpeg-turbo-remove-test.patch
   same as Fedora bug 1161585 related to upstream issue
   https://sourceforge.net/p/libjpeg-turbo/bugs/83/

OBS-URL: https://build.opensuse.org/request/show/288518
OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=52
2015-03-03 07:35:33 +00:00
OBS User mrdocs
805f9cb0c0 Accepting request 280687 from home:posophe:branches:graphics
Update

OBS-URL: https://build.opensuse.org/request/show/280687
OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=50
2015-01-10 05:29:06 +00:00
80c5fd18af - security update CVE-2014-9092 [bnc#906761]
* added libjpeg-turbo-CVE-2014-9092.patch

- security update CVE-2014-9092 [bnc#906761]
  * added libjpeg-turbo-CVE-2014-9092.patch

OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=48
2014-11-27 09:52:47 +00:00
3755035645 Accepting request 254475 from home:coolo:branches:openSUSE:Factory
- to obsolete old versions better use obsoletes

OBS-URL: https://build.opensuse.org/request/show/254475
OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=44
2014-10-07 07:39:55 +00:00
OBS User mrdocs
1c74662dc1 Accepting request 253911 from home:olh:branches:graphics
- add Conflicts: libjpeg-6.2.0 to libjpeg62 to obsolete old version
  and to avoid file conflicts

OBS-URL: https://build.opensuse.org/request/show/253911
OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=43
2014-10-04 20:59:46 +00:00
bdc9f35a21 - update to 1.3.1:
*  Fixed a bug whereby attempting to encode a progressive JPEG
     with arithmetic entropy coding (by passing arguments of
     -progressive -arithmetic to cjpeg or jpegtran, for instance)
     would result in an error, "Requested feature was omitted at
     compile time".
  * Fixed a couple of issues whereby malformed JPEG images would
    cause libjpeg-turbo to use uninitialized memory during
    decompression.
  *  Fixed an error ("Buffer passed to JPEG library is too small")
     that occurred when calling the TurboJPEG YUV encoding function
     with a very small (< 5x5) source image, and added a unit test
     to check for this error.
  * etc. see ChangeLog.txt

OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=41
2014-03-31 09:32:49 +00:00
e16ca44fe5 - update do 1.3.0:
* Fixed a Huffman encoder bug that prevented I/O suspension from 
    working properly.
  *  Added support for additional scaling factors (3/8, 5/8, 3/4, 
     7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when 
     decompressing.  Note that the IDCT will not be SIMD-accelerated 
     when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB 
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt

- update do 1.3.0:
  * Fixed a Huffman encoder bug that prevented I/O suspension from
    working properly.
  *  Added support for additional scaling factors (3/8, 5/8, 3/4,
     7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
     decompressing.  Note that the IDCT will not be SIMD-accelerated
     when using any of these new scaling factors.
  * The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
    flag.
  * cjpeg can now be used to generate JPEG files with the RGB
    colorspace (feature ported from jpeg-8d.)
  * etc. see ChangeLog.txt

OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=34
2013-09-10 12:52:09 +00:00
fd2dd448d0 - by change from Wed Mar 6 11:19:02 UTC 2013, libjpeg62-turbo
do not provide any binaries, so it should not provide jpeg

OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=32
2013-06-14 09:27:35 +00:00
OBS User mrdocs
832f0d2b75 Accepting request 176777 from home:elvigia:branches:graphics
- Build with full RELRO as this library is exposed to 
  possible malicious images.

- Build with full RELRO as this library is exposed to· 
  possible malicious images.

OBS-URL: https://build.opensuse.org/request/show/176777
OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=30
2013-05-28 04:33:03 +00:00
d3e01b3963 - libjpeg62-turbo package created [bnc#807183]
- libjpeg62-turbo package created [bnc#807183]

OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=26
2013-05-17 07:31:29 +00:00
e1cda27622 Accepting request 175935 from home:pgajdos
- remove
   %{_bindir}/*
   %doc %{_mandir}/man1/*
  https://bugzilla.novell.com/show_bug.cgi?id=807183#c14

- libjpeg62-turbo package created

- selfconflicts are not possible, remove it

- Update to version 1.2.1:
    * fixed heap overflow [bnc#771791]

- Update to version 1.2.0 
    * Fixed out-of-bounds read in SSE2 SIMD code
    * Added a compile-time macro (LIBJPEG_TURBO_VERSION) that can 
      be used to check the version of libjpeg-turbo against which 
      an application was compiled.
    * Added new RGBA/BGRA/ABGR/ARGB colorspace extension constants
    * libjpeg-turbo will now correctly decompress erroneous 
      CMYK/YCCK JPEGs whose K component is assigned a component ID 
      of 1 instead of 4.  
    * Added SIMD routines for RGB-to-grayscale color conversion
    * Improved the performance of the C color conversion routines
    * Added a function to the TurboJPEG API that performs lossless 
      transforms.
    * Added support for 4:4:0 (transposed 4:2:2) subsampling

- add libtool as buildrequire to avoid implicit dependency

OBS-URL: https://build.opensuse.org/request/show/175935
OBS-URL: https://build.opensuse.org/package/show/graphics/libjpeg-turbo?expand=0&rev=25
2013-05-17 07:19:55 +00:00