Accepting request 523789 from home:hpjansson:openjpeg2-cve-factory
Add security fixes:
openjpeg2-CVE-2016-10504.patch (CVE-2016-10504, bsc#1056351),
openjpeg2-CVE-2016-10505.patch (CVE-2016-10505, bsc#1056363),
openjpeg2-CVE-2016-10506.patch (CVE-2016-10506, bsc#1056396),
openjpeg2-CVE-2017-12982.patch (CVE-2017-12982, bsc#1054696),
openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
bsc#1056622, bsc#1057511),
openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562),
openjpeg2-CVE-2017-14151.patch (CVE-2017-14151, bsc#1057336),
openjpeg2-CVE-2017-14152.patch (CVE-2017-14152, bsc#1057335),
most of which are critical, including heap and stack overwrites,
over-reads and division by zero errors.
OBS-URL: https://build.opensuse.org/request/show/523789
OBS-URL: https://build.opensuse.org/package/show/graphics/openjpeg2?expand=0&rev=28
2017-09-13 14:11:10 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 12 20:49:00 CEST 2017 - hpj@suse.com
|
|
|
|
|
|
|
|
|
|
- Add security fixes:
|
|
|
|
|
openjpeg2-CVE-2016-10504.patch (CVE-2016-10504, bsc#1056351),
|
|
|
|
|
openjpeg2-CVE-2016-10505.patch (CVE-2016-10505, bsc#1056363),
|
|
|
|
|
openjpeg2-CVE-2016-10506.patch (CVE-2016-10506, bsc#1056396),
|
|
|
|
|
openjpeg2-CVE-2017-12982.patch (CVE-2017-12982, bsc#1054696),
|
|
|
|
|
openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
|
|
|
|
|
bsc#1056622, bsc#1057511),
|
|
|
|
|
openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
|
|
|
|
|
openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562),
|
|
|
|
|
openjpeg2-CVE-2017-14151.patch (CVE-2017-14151, bsc#1057336),
|
|
|
|
|
openjpeg2-CVE-2017-14152.patch (CVE-2017-14152, bsc#1057335),
|
|
|
|
|
most of which are critical, including heap and stack overwrites,
|
|
|
|
|
over-reads and division by zero errors.
|
|
|
|
|
|
2016-12-19 09:58:53 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 19 08:42:02 UTC 2016 - normand@linux.vnet.ibm.com
|
|
|
|
|
|
|
|
|
|
- update to version 2.1.2
|
|
|
|
|
Bug fixes including security fixes among which:
|
|
|
|
|
CVE-2016-8332 CVE-2016-7163
|
|
|
|
|
CVE-2016-5139 CVE-2016-5159
|
|
|
|
|
CVE-2016-5158 (not listed but solved different way)
|
|
|
|
|
Huge amount of critical bugfixes
|
|
|
|
|
Speed improvements
|
|
|
|
|
No API/ABI break compared to v2.1.1/v2.1
|
|
|
|
|
- some doc files now have '.md' suffix (like README.md)
|
|
|
|
|
- CVE-2016-5152 with new 0018-tcd_get_decoded_tile_size.patch
|
|
|
|
|
|
2015-12-08 15:23:02 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 8 15:13:03 UTC 2015 - p.drouand@gmail.com
|
|
|
|
|
|
|
|
|
|
- Add a pkg-config dependency; expand pkgconfig
|
|
|
|
|
|
2015-10-19 09:40:27 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 19 09:20:16 UTC 2015 - schwab@suse.de
|
|
|
|
|
|
|
|
|
|
- Re-add baselibs.conf, needed by poppler and leptonica
|
|
|
|
|
|
2015-09-04 13:50:53 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 4 11:54:30 UTC 2015 - mpluskal@suse.com
|
|
|
|
|
|
|
|
|
|
- Use cmake macro
|
|
|
|
|
- Remove baselibs.conf (it was broken anyways for months)
|
|
|
|
|
- Cleanup spec file with spec-cleaner
|
|
|
|
|
|
2014-05-31 07:54:10 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat May 31 07:12:54 UTC 2014 - coolo@suse.com
|
|
|
|
|
|
|
|
|
|
- pimp up the previous changelog
|
|
|
|
|
|
2014-05-27 15:14:19 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue May 27 15:10:53 UTC 2014 - opensuse@dstoecker.de
|
|
|
|
|
|
|
|
|
|
- update to version 2.1.0
|
|
|
|
|
|
2014-05-31 07:54:10 +00:00
|
|
|
New Features:
|
|
|
|
|
|
|
|
|
|
* Digital Cinema profiles have been fixed and updated
|
|
|
|
|
* New option to disable MCT if needed
|
|
|
|
|
* extended RAW support: it is now possible to input raw images
|
|
|
|
|
with subsampled color components (422, 420, etc)
|
|
|
|
|
* New way to deal with profiles
|
|
|
|
|
|
|
|
|
|
API/ABI modifications: (see abi_compat_report in dev-utils/scripts)
|
|
|
|
|
|
|
|
|
|
* Removed deprecated functions
|
|
|
|
|
- opj_stream_create_default_file_stream(FILE*,...)
|
|
|
|
|
- opj_stream_create_file_stream(FILE*,...)
|
|
|
|
|
- opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data)
|
|
|
|
|
* Added
|
|
|
|
|
- opj_stream_create_default_file_stream(char*,...)
|
|
|
|
|
- opj_stream_create_file_stream(char*,...)
|
|
|
|
|
- opj_stream_destroy(opj_stream_t*)
|
|
|
|
|
- opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data,
|
|
|
|
|
... opj_stream_free_user_data_fn p_function)
|
|
|
|
|
- JPEG 2000 profiles and Part-2 extensions defined through '#define'
|
|
|
|
|
* Changed
|
|
|
|
|
- 'alpha' field added to 'opj_image_comp' structure
|
|
|
|
|
- 'OPJ_CLRSPC_EYCC' added to enum COLOR_SPACE
|
|
|
|
|
- 'OPJ_CLRSPC_CMYK' added to enum COLOR_SPACE
|
|
|
|
|
- 'OPJ_CODEC_JPP' and 'OPJ_CODEC_JPX' added to CODEC_FORMAT
|
|
|
|
|
(not yet used in use)
|
|
|
|
|
- 'max_cs_size' and 'rsiz' fields added to opj_cparameters_t
|
|
|
|
|
|
|
|
|
|
Misc:
|
|
|
|
|
* OpenJPEG is now officialy conformant with JPEG 2000 Part-1
|
|
|
|
|
and will soon become official reference software at the
|
|
|
|
|
JPEG committee.
|
|
|
|
|
* Huge amount of bug fixes. See CHANGES for details.
|
|
|
|
|
|
2014-05-09 14:20:36 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu May 8 14:47:36 UTC 2014 - hpj@urpla.net
|
|
|
|
|
|
|
|
|
|
- version 2.0.1
|
|
|
|
|
|
|
|
|
|
- New Features:
|
|
|
|
|
* Digital Cinema profiles have been fixed and updated
|
|
|
|
|
* New option to disable MCT if needed
|
|
|
|
|
* extended RAW support: it is now possible to input raw images
|
|
|
|
|
with subsampled color components (422, 420, etc)
|
|
|
|
|
|
|
|
|
|
- API/ABI modifications: (see abi_compat_report_2.0.1.html in dev-utils/scripts)
|
|
|
|
|
* No changes, API/ABI fully compatible with 2.0.0
|
|
|
|
|
|
|
|
|
|
- Misc:
|
|
|
|
|
* OpenJPEG is now officialy conformant with JPEG 2000 Part-1
|
|
|
|
|
and will soon become official reference software at the
|
|
|
|
|
JPEG committee.
|
|
|
|
|
* Huge amount of bug fixes. See CHANGES for details.
|
|
|
|
|
|
|
|
|
|
- adjust library name
|
|
|
|
|
|
2014-02-18 07:24:25 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 18 07:21:03 UTC 2014 - pgajdos@suse.com
|
|
|
|
|
|
|
|
|
|
- add libopenjp2.pc (demand introduced by ImageMagick 6.8.8-5)
|
|
|
|
|
|
2013-11-27 22:00:01 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 26 09:48:46 UTC 2013 - gber@opensuse.org
|
|
|
|
|
|
|
|
|
|
- remove bogus dependency on libjpeg-devel
|
|
|
|
|
|
2013-11-14 07:50:44 +00:00
|
|
|
-------------------------------------------------------------------
|
2013-11-26 04:26:13 +00:00
|
|
|
Tue Nov 26 04:25:48 UTC 2013 - mrdocs@opensuse.org
|
|
|
|
|
|
|
|
|
|
- add explicit libjpeg-devel to fix build on SLE 11
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2013-11-27 22:00:01 +00:00
|
|
|
Sun Nov 24 10:38:25 UTC 2013 - gber@opensuse.org
|
|
|
|
|
|
|
|
|
|
- use pkgconfig macros
|
|
|
|
|
- let openjpeg2-devel only recommend openjpeg2
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2013-11-14 07:50:44 +00:00
|
|
|
Wed Nov 13 16:50:45 UTC 2013 - gber@opensuse.org
|
|
|
|
|
|
|
|
|
|
- remove bogus dependency on libgeotiff-devel and depend on
|
|
|
|
|
libtiff-devel
|
|
|
|
|
- ensure no bundled libraries are used
|
|
|
|
|
|
2013-11-12 20:38:35 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 12 14:06:55 UTC 2013 - gber@opensuse.org
|
|
|
|
|
|
|
|
|
|
- cleanup
|
|
|
|
|
- improve group, summary, description
|
|
|
|
|
- fix license
|
|
|
|
|
- fix build dependencies
|
|
|
|
|
- use optflags, don't mess with debug symbols
|
|
|
|
|
- fix library install path
|
|
|
|
|
- create main package containing codec tools
|
|
|
|
|
- build doxygen documentaion
|
|
|
|
|
- fix %post/un scriptlets for the libopenjp2-6 subpackage
|
|
|
|
|
- add baselibs
|
|
|
|
|
|
2013-05-08 14:48:31 +00:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed May 8 11:56:09 UTC 2013 - behrisch@users.sourceforge.net
|
|
|
|
|
|
|
|
|
|
- fixed make install for non suse targets
|
|
|
|
|
|
2013-11-12 20:38:35 +00:00
|
|
|
-------------------------------------------------------------------
|
2012-11-25 19:08:32 +00:00
|
|
|
Sun Nov 25 14:55:50 UTC 2012 - Angelos Tzotsos <tzotsos@opensuse.org>
|
|
|
|
|
|
|
|
|
|
Update to version 2.0 Final, fixed some major issues :
|
|
|
|
|
* support of Large JPEG2000 Files greater than 2 GBytes
|
|
|
|
|
* support of tile coding and decoding which allows to encode or decode only specific part of image if the file is tiled
|
|
|
|
|
* implements subset of the MCT part 2
|
|
|
|
|
* streaming system
|
|
|
|
|
* improvement of the cmake build system
|
|
|
|
|
* adding a CDash platform to support continuous integration of the different version
|
|
|
|
|
* opaque pointers (opj_stream, opj_codec) have been used to simplify the API
|
|
|
|
|
* the library does not perform the t1 decoding of non-needed resolutions any more (increases performance)
|
|
|
|
|
* a lot of code has been simplified/factored in order to lower the memory consumption.
|
|
|
|
|
* j2k.c and jp2.c have been modified to support a simpler extension mechanism
|
|
|
|
|
* prefix all public and the great majority of the private symbols with opj_ to avoid conflict with external libraries
|
|
|
|
|
|
|
|
|
|
------------------------------------------------------------------
|
|
|
|
|
Mon Jan 24 00:00:00 UTC 2010 - Angelos Tzotsos <tzotsos@opensuse.org>
|
|
|
|
|
|
|
|
|
|
* Initial build from SVN
|
