From 5b1e1068cb37c7ec980af802d6ea4c53bdc685b45e04a1d8adc69935b753a57f Mon Sep 17 00:00:00 2001 From: Hans-Peter Jansen Date: Wed, 10 Jan 2024 09:20:14 +0000 Subject: [PATCH] Accepting request 1137794 from home:michals:Calibre * Fix CVE-2018-16376 (bsc#1106881) * Fix CVE-2021-29338 (bsc#1184774) * Fix CVE-2022-1122 (bsc#1197738) * Fix CVE-2020-27814 (bsc#1179594) * Fix CVE-2020-27824 (bsc#1179821) * Fix CVE-2020-27841 (bsc#1180042) * Fix CVE-2020-27842 (bsc#1180043) * Fix CVE-2020-27843 (bsc#1180044) * Fix CVE-2020-27845 (bsc#1180046) * Fix CVE-2020-15389 (bsc#1173578) * Fix CVE-2020-27823 (bsc#1180457) * Fix CVE-2018-20846 (bsc#1140205) * Fix CVE-2018-21010 (bsc#1149789) * Fix CVE-2018-20845 (bsc#1140130) OBS-URL: https://build.opensuse.org/request/show/1137794 OBS-URL: https://build.opensuse.org/package/show/graphics/openjpeg2?expand=0&rev=48 --- openjpeg2.changes | 14 ++++++++++++++ openjpeg2.spec | 2 +- 2 files changed, 15 insertions(+), 1 deletion(-) diff --git a/openjpeg2.changes b/openjpeg2.changes index b0133e3..bc6c937 100644 --- a/openjpeg2.changes +++ b/openjpeg2.changes @@ -11,6 +11,9 @@ Fri Jun 3 09:59:48 UTC 2022 - Timothy Brown * Decoder: add support for high throughput (HTJ2K) decoding * Decoder: add support for partial bitstream decoding * Bug fixes (including security fixes) + * Fix CVE-2018-16376 (bsc#1106881) + * Fix CVE-2021-29338 (bsc#1184774) + * Fix CVE-2022-1122 (bsc#1197738) ------------------------------------------------------------------- Mon Jan 18 23:00:45 UTC 2021 - Dirk Müller @@ -21,6 +24,14 @@ Mon Jan 18 23:00:45 UTC 2021 - Dirk Müller * Encoder: single-threaded performance improvements in forward DWT for 5-3 and 9-7 (and other improvements) #1253 * Encoder: support IMF profiles #1235 * Many bug fixes (including security fixes) + * Fix CVE-2020-27814 (bsc#1179594) + * Fix CVE-2020-27824 (bsc#1179821) + * Fix CVE-2020-27841 (bsc#1180042) + * Fix CVE-2020-27842 (bsc#1180043) + * Fix CVE-2020-27843 (bsc#1180044) + * Fix CVE-2020-27845 (bsc#1180046) + * Fix CVE-2020-15389 (bsc#1173578) + * Fix CVE-2020-27823 (bsc#1180457) - drop 024b8407392cb0b8.patch, 05f9b91e60debda0.patch, 21399f6b7d318fcd.patch, 3aef207f90e937d4.patch, @@ -51,6 +62,9 @@ Tue Apr 02 10:41:57 UTC 2019 - mvetter@suse.com * Fix CVE-2018-14423 (bsc#1102016) * Fix CVE-2018-7648 (bsc#1083901) * Fix CVE-2018-5727 (bsc#1076314) + * Fix CVE-2018-20846 (bsc#1140205) + * Fix CVE-2018-21010 (bsc#1149789) + * Fix CVE-2018-20845 (bsc#1140130) * For full list see ChangeLog file - Remove install-fix.patch: upstreamed diff --git a/openjpeg2.spec b/openjpeg2.spec index 9f6b2bc..b092737 100644 --- a/openjpeg2.spec +++ b/openjpeg2.spec @@ -1,7 +1,7 @@ # # spec file for package openjpeg2 # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed