pool/opencv
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 766065 from home:dimstar:Factory

Browse Source 
disable internal and external jasper; JasPer is insecure and dead upstream. CVEs remain unfixed

OBS-URL: https://build.opensuse.org/request/show/766065
OBS-URL: https://build.opensuse.org/package/show/science/opencv?expand=0&rev=12
This commit is contained in:
Atri Bhattacharya 2020-01-28 11:15:26 +00:00 committed by Git OBS Bridge
parent 99b89d3e13
commit 7a7a69fb46
2 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
opencv.changes
View File

@ -1,3 +1,13 @@
-------------------------------------------------------------------
Tue Jan 21 11:38:08 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
- Drop Jasper (i.e jpeg2k) support (boo#1130404, boo#1144260)
JasPer is unmaintained, CVEs are not being addressed (some issues
received patches submitted to the upstream github project, but are
not being merged, other CVEs are considered unfixable). openSUSE
follows other distros in dropping JasPer now (much later than
most others, incl. Debian).
-------------------------------------------------------------------
Mon Jan 20 23:22:42 UTC 2020 - Stefan Brüns <stefan.bruens@rwth-aachen.de>

2
opencv.spec
View File

@ -51,7 +51,6 @@ Patch3: opencv-includedir.patch
BuildRequires: cmake
BuildRequires: fdupes
BuildRequires: libeigen3-devel
BuildRequires: libjasper-devel
BuildRequires: libjpeg-devel
BuildRequires: pkgconfig
BuildRequires: memory-constraints
@ -232,6 +231,7 @@ rm -f doc/packaging.txt
-DOPENCV_SKIP_PYTHON_LOADER=ON \
-DOPENCV_PYTHON2_INSTALL_PATH=%{python2_sitearch} \
-DOPENCV_PYTHON3_INSTALL_PATH=%{python3_sitearch} \
-DWITH_JASPER=OFF \
make %{?_smp_mflags} VERBOSE=1