File libjpeg62-turbo.changes of Package libjpeg-turbo
445
1
-------------------------------------------------------------------
2
Thu Jun 3 08:40:46 UTC 2021 - pgajdos@suse.com
3
4
- security update
5
- added patches
6
fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
7
+ libjpeg-turbo-CVE-2020-17541.patch
8
9
-------------------------------------------------------------------
10
Mon Jun 8 11:49:53 UTC 2020 - pgajdos@suse.com
11
12
- security update
13
- added patches
14
fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
15
+ libjpeg-turbo-CVE-2020-13790.patch
16
17
-------------------------------------------------------------------
18
Tue Nov 12 09:46:17 UTC 2019 - pgajdos@suse.com
19
20
- security update
21
- added patches
22
CVE-2019-2201 [bsc#1156402]
23
+ libjpeg-turbo-CVE-2019-2201.patch
24
25
-------------------------------------------------------------------
26
Tue Jun 19 13:46:45 UTC 2018 - pgajdos@suse.com
27
28
- security update:
29
* CVE-2018-1152 [bsc#1098155]
30
+ libjpeg-turbo-CVE-2018-1152.patch
31
32
-------------------------------------------------------------------
33
Tue Jun 12 13:34:11 UTC 2018 - pgajdos@suse.com
34
35
- security update:
36
* CVE-2018-11813 [bsc#1096209]
37
+ libjpeg-turbo-CVE-2018-11813.patch
38
* remove redundant libjpeg-turbo-CVE-2017-15232.patch
39
[bsc#1062937#c17]
40
41
-------------------------------------------------------------------
42
Mon Dec 18 13:07:03 UTC 2017 - pgajdos@suse.com
43
44
- update to version 1.5.3
45
1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
46
when using the YUVImage constructor that creates an instance backed by separate
47
image planes and allocates memory for the image planes.
48
2. Fixed an issue whereby the Java version of TJUnitTest would fail when
49
testing BufferedImage encoding/decoding on big endian systems.
50
3. Fixed a segfault in djpeg that would occur if an output format other than
51
PPM/PGM was selected along with the `-crop` option. The `-crop` option now
52
works with the GIF and Targa formats as well (unfortunately, it cannot be made
53
to work with the BMP and RLE formats due to the fact that those output engines
54
write scanlines in bottom-up order.) djpeg will now exit gracefully if an
55
output format other than PPM/PGM, GIF, or Targa is selected along with the
56
`-crop` option.
57
4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
58
quantization was enabled.
59
5. TJBench (both C and Java versions) will now display usage information if any
60
command-line argument is unrecognized. This prevents the program from silently
61
ignoring typos.
62
6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
63
program was used to decompress an existing JPEG image.
64
7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
65
occurred when attempting to decompress a JPEG image that had been compressed
66
with 4:1:1 chrominance subsampling.
67
8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
68
end of a single-scan (non-progressive) image, subsequent calls to
69
`jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
70
`JPEG_REACHED_EOI`.
71
9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
72
JPEG images that were compressed with a sampling factor other than 1 (for
73
instance, with `cjpeg -grayscale -sample 2x2`).
74
75
76
-------------------------------------------------------------------
77
Thu Oct 12 10:59:03 UTC 2017 - pgajdos@suse.com
78
79
- security update:
80
* CVE-2017-15232 [bsc#1062937]
81
+ libjpeg-turbo-CVE-2017-15232.patch
82
83
-------------------------------------------------------------------
84
Thu Oct 12 10:22:05 UTC 2017 - pgajdos@suse.com
85
86
- Update to version 1.5.2
87
+ Fixed several memory leaks in the TurboJPEG API library that
88
could occur if the library was built with certain compilers
89
and optimization levels.
90
+ The libjpeg-turbo memory manager will now honor the
91
max_memory_to_use structure member in jpeg_memory_mgr,
92
which can be set to the maximum amount of memory (in bytes)
93
that libjpeg-turbo should use during decompression or
94
multi-pass (including progressive) compression. This limit
95
can also be set using the JPEGMEM environment variable or
96
using the -maxmemory switch in cjpeg/djpeg/jpegtran.
97
+ TJBench will now run each benchmark for 1 second prior to
98
starting the timer, in order to improve the consistency of
99
the results. Furthermore, the -warmup option is now used to
100
specify the amount of warmup time rather than the number of
101
warmup iterations.
102
+ Fixed an error (short jump is out of range) that occurred
103
when assembling the 32-bit x86 SIMD extensions with NASM
104
versions prior to 2.04.
105
+ Fixed a regression introduced by 1.5 beta1[11] that prevented
106
the Java version of TJBench from outputting any reference images
107
(the -nowrite switch was accidentally enabled by default.)
108
libjpeg-turbo should now build and run with full AltiVec SIMD
109
acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.
110
111
-------------------------------------------------------------------
112
Thu Jun 15 10:50:53 UTC 2017 - jbohac@suse.com
113
114
- mention the included utilities (djpeg, jpegtran, rdjpgcom,
115
tjbench, and wrjpgcom) in the package description.
116
117
-------------------------------------------------------------------
118
Wed Jan 18 10:07:29 UTC 2017 - bwiedemann@suse.com
119
120
- set build date to enable reproducible builds
121
122
-------------------------------------------------------------------
123
Wed Sep 21 10:50:36 UTC 2016 - idonmez@suse.com
124
125
- Update to version 1.5.1 fate#324061
126
+ Fix for PowerPC platforms lacking AltiVec instructions
127
+ Fix ABI problem with clang/llvm on aarch64.
128
+ Fancy upsampling is now supported when decompressing JPEG
129
images that use 4:4:0 (h1v2) chroma subsampling.
130
+ If merged upsampling isn't SIMD-accelerated but YCbCr-to-RGB
131
conversion is, then libjpeg-turbo will now disable merged
132
upsampling when decompressing YCbCr JPEG images into RGB
133
or extended RGB output images. This significantly speeds up
134
the decompression of 4:2:0 and 4:2:2 JPEGs on ARM platforms
135
if fancy upsampling is not used
136
(for example, if the -nosmooth option to djpeg is specified.)
137
+ The TurboJPEG API will now decompress 4:2:2 and 4:4:0 JPEG
138
images with 2x2 luminance sampling factors and 2x1 or 1x2
139
chrominance sampling factors.
140
+ Fixed an unsigned integer overflow in the libjpeg memory manager.
141
+ Fixed additional negative left shifts and other issues reported
142
by the GCC and Clang undefined behavior sanitizers when
143
attempting to decompress specially-crafted malformed JPEG
144
images. None of these issues posed a security threat, but
145
removing the warnings makes it easier to detect actual
146
security issues, should they arise in the future.
147
+ Fixed an out-of-bounds array reference, introduced by
148
1.4.902 and detected by the Clang undefined behavior sanitizer,
149
that could be triggered by a specially-crafted malformed
150
JPEG image with more than four components. Because the
151
out-of-bounds reference was still within the same structure,
152
it was not known to pose a security threat, but removing
153
the warning makes it easier to detect actual security issues,
154
should they arise in the future.
155
156
-------------------------------------------------------------------
157
Wed Jun 8 07:53:26 UTC 2016 - idonmez@suse.com
158
159
- Update to version 1.5.0
160
+ Fixed an issue whereby a malformed motion-JPEG frame could
161
cause the "fast path" of libjpeg-turbo's Huffman decoder to
162
read from uninitialized memory.
163
+ Added libjpeg-turbo version and build information to the global
164
string table of the libjpeg and TurboJPEG API libraries.
165
+ Fixed a couple of issues in the PPM reader that would cause
166
buffer overruns in cjpeg if one of the values in a binary
167
PPM/PGM input file exceeded the maximum value defined in the
168
file's header. libjpeg-turbo 1.4.2 already included a similar
169
fix for ASCII PPM/PGM files. Note that these issues were not
170
security bugs, since they were confined to the cjpeg program
171
and did not affect any of the libjpeg-turbo libraries.
172
+ Fixed an issue whereby attempting to decompress a JPEG file with
173
a corrupt header using the tjDecompressToYUV2() function would
174
cause the function to abort without returning an error and,
175
under certain circumstances, corrupt the stack. This only
176
occurred if tjDecompressToYUV2() was called prior to calling
177
tjDecompressHeader3(), or if the return value from
178
tjDecompressHeader3() was ignored (both cases represent
179
incorrect usage of the TurboJPEG API.)
180
+ The jpeg_stdio_src(), jpeg_mem_src(), jpeg_stdio_dest(),
181
and jpeg_mem_dest() functions in the libjpeg API will now
182
throw an error if a source/destination manager has already
183
been assigned to the compress or decompress object by a
184
different function or by the calling program.
185
186
-------------------------------------------------------------------
187
Thu Oct 8 07:56:34 UTC 2015 - idonmez@suse.com
188
189
- Update to version 1.4.2
190
+ Crash fixes
191
+ clang compatibility fixes
192
+ See the included ChangeLog.txt for the details
193
- Drop libjpeg-turbo-1.4.0-int32.patch, not needed anymore.
194
195
-------------------------------------------------------------------
196
Thu Mar 5 11:43:27 UTC 2015 - jengelh@inai.de
197
198
- Remove useless same-name provides. Use download URLs not
199
dependent on directory structure.
200
201
-------------------------------------------------------------------
202
Mon Mar 2 16:24:05 UTC 2015 - normand@linux.vnet.ibm.com
203
204
- Remove float tests with new libjpeg-turbo-remove-test.patch
205
same as Fedora bug 1161585 related to upstream issue
206
https://sourceforge.net/p/libjpeg-turbo/bugs/83/
207
208
-------------------------------------------------------------------
209
Sat Jan 10 00:39:57 UTC 2015 - p.drouand@gmail.com
210
211
- Update to version 1.4.0
212
+ Fixed a build issue on OS X PowerPC platforms (md5cmp failed to build
213
because OS X does not provide the le32toh() and htole32() functions.)
214
+ The non-SIMD RGB565 color conversion code did not work correctly on big
215
endian machines. This has been fixed.
216
+ Fixed an issue in tjPlaneSizeYUV() whereby it would erroneously return 1
217
instead of -1 if componentID was > 0 and subsamp was TJSAMP_GRAY.
218
+ Fixed an issue in tjBufSizeYUV2() wherby it would erroneously return 0
219
instead of -1 if width was < 1.
220
+ The Huffman encoder now uses clz and bsr instructions for bit counting on
221
ARM64 platforms (see 1.4 beta1 [5].)
222
+ The close() method in the TJCompressor and TJDecompressor Java classes is
223
now idempotent. Previously, that method would call the native tjDestroy()
224
function even if the TurboJPEG instance had already been destroyed. This
225
caused an exception to be thrown during finalization, if the close() method had
226
already been called. The exception was caught, but it was still an expensive
227
operation.
228
+ The TurboJPEG API previously generated an error ("Could not determine
229
subsampling type for JPEG image") when attempting to decompress grayscale JPEG
230
images that were compressed with a sampling factor other than 1 (for instance,
231
with 'cjpeg -grayscale -sample 2x2'). Subsampling technically has no meaning
232
with grayscale JPEGs, and thus the horizontal and vertical sampling factors
233
for such images are ignored by the decompressor. However, the TurboJPEG API
234
was being too rigid and was expecting the sampling factors to be equal to 1
235
before it treated the image as a grayscale JPEG.
236
+ cjpeg, djpeg, and jpegtran now accept an argument of -version, which will
237
print the library version and exit.
238
+ Referring to 1.4 beta1 [15], another extremely rare circumstance was
239
discovered under which the Huffman encoder's local buffer can be overrun
240
when a buffered destination manager is being used and an
241
extremely-high-frequency block (basically junk image data) is being encoded.
242
Even though the Huffman local buffer was increased from 128 bytes to 136 bytes
243
to address the previous issue, the new issue caused even the larger buffer to
244
be overrun. Further analysis reveals that, in the absolute worst case (such as
245
setting alternating AC coefficients to 32767 and -32768 in the JPEG scanning
246
order), the Huffman encoder can produce encoded blocks that approach double the
247
size of the unencoded blocks. Thus, the Huffman local buffer was increased to
248
256 bytes, which should prevent any such issue from re-occurring in the future.
249
+ The new tjPlaneSizeYUV(), tjPlaneWidth(), and tjPlaneHeight() functions
250
were not actually usable on any platform except OS X and Windows, because
251
those functions were not included in the libturbojpeg mapfile. This has been
252
fixed.
253
+ Restored the JPP(), JMETHOD(), and FAR macros in the libjpeg-turbo header
254
files. The JPP() and JMETHOD() macros were originally implemented in libjpeg
255
as a way of supporting non-ANSI compilers that lacked support for prototype
256
parameters. libjpeg-turbo has never supported such compilers, but some
257
software packages still use the macros to define their own prototypes.
258
Similarly, libjpeg-turbo has never supported MS-DOS and other platforms that
259
have far symbols, but some software packages still use the FAR macro. A pretty
260
good argument can be made that this is a bad practice on the part of the
261
software in question, but since this affects more than one package, it's just
262
easier to fix it here.
263
+ Fixed issues that were preventing the ARM 64-bit SIMD code from compiling
264
for iOS, and included an ARMv8 architecture in all of the binaries installed by
265
the "official" libjpeg-turbo SDK for OS X.
266
- Adapt patches to upstream changes
267
libjpeg-ocloexec.patch > libjpeg-1.4.0-ocloexec.patch
268
libjpeg-turbo-1.3.0-int32.patch > libjpeg-turbo-1.4.0-int32.patch
269
- Remove libjpeg-turbo-CVE-2014-9092.patch; fixed on upstream release
270
- Bump tminor to 1
271
272
-------------------------------------------------------------------
273
Thu Nov 27 09:49:28 UTC 2014 - pgajdos@suse.com
274
275
- security update CVE-2014-9092 [bnc#906761]
276
* added libjpeg-turbo-CVE-2014-9092.patch
277
278
-------------------------------------------------------------------
279
Tue Oct 7 07:31:55 UTC 2014 - coolo@suse.com
280
281
- to obsolete old versions better use obsoletes
282
283
-------------------------------------------------------------------
284
Sat Oct 4 14:57:19 UTC 2014 - olaf@aepfle.de
285
286
- add Conflicts: libjpeg-6.2.0 to libjpeg62 to obsolete old version
287
and to avoid file conflicts
288
289
-------------------------------------------------------------------
290
Mon Mar 31 09:32:32 UTC 2014 - pgajdos@suse.com
291
292
- update to 1.3.1:
293
* Fixed a bug whereby attempting to encode a progressive JPEG
294
with arithmetic entropy coding (by passing arguments of
295
-progressive -arithmetic to cjpeg or jpegtran, for instance)
296
would result in an error, "Requested feature was omitted at
297
compile time".
298
* Fixed a couple of issues whereby malformed JPEG images would
299
cause libjpeg-turbo to use uninitialized memory during
300
decompression.
301
* Fixed an error ("Buffer passed to JPEG library is too small")
302
that occurred when calling the TurboJPEG YUV encoding function
303
with a very small (< 5x5) source image, and added a unit test
304
to check for this error.
305
* etc. see ChangeLog.txt
306
307
-------------------------------------------------------------------
308
Tue Sep 10 12:51:24 UTC 2013 - pgajdos@suse.com
309
310
- update do 1.3.0:
311
* Fixed a Huffman encoder bug that prevented I/O suspension from
312
working properly.
313
* Added support for additional scaling factors (3/8, 5/8, 3/4,
314
7/8, 9/8, 5/4, 11/8, 3/2, 13/8, 7/4, 15/8, and 2) when
315
decompressing. Note that the IDCT will not be SIMD-accelerated
316
when using any of these new scaling factors.
317
* The tjDecompressToYUV() function now supports the TJFLAG_FASTDCT
318
flag.
319
* cjpeg can now be used to generate JPEG files with the RGB
320
colorspace (feature ported from jpeg-8d.)
321
* etc. see ChangeLog.txt
322
323
-------------------------------------------------------------------
324
Fri Jun 14 09:24:19 UTC 2013 - pgajdos@suse.com
325
326
- by change from Wed Mar 6 11:19:02 UTC 2013, libjpeg62-turbo
327
do not provide any binaries, so it should not provide jpeg
328
329
-------------------------------------------------------------------
330
Mon May 27 18:22:46 UTC 2013 - crrodriguez@opensuse.org
331
332
- Build with full RELRO as this library is exposed to·
333
possible malicious images.
334
335
-------------------------------------------------------------------
336
Wed Mar 6 11:19:02 UTC 2013 - pgajdos@suse.com
337
338
- remove
339
%{_bindir}/*
340
%doc %{_mandir}/man1/*
341
https://bugzilla.novell.com/show_bug.cgi?id=807183#c14
342
343
-------------------------------------------------------------------
344
Wed Mar 6 07:58:46 UTC 2013 - pgajdos@suse.com
345
346
- libjpeg62-turbo package created [bnc#807183]
347
348
-------------------------------------------------------------------
349
Mon Aug 13 17:05:35 UTC 2012 - dmueller@suse.com
350
351
- selfconflicts are not possible, remove it
352
353
-------------------------------------------------------------------
354
Mon Jul 23 11:33:56 UTC 2012 - pgajdos@suse.com
355
356
- Update to version 1.2.1:
357
* fixed heap overflow [bnc#771791]
358
359
-------------------------------------------------------------------
360
Thu Mar 22 13:25:09 UTC 2012 - idonmez@suse.com
361
362
- Update to version 1.2.0
363
* Fixed out-of-bounds read in SSE2 SIMD code
364
* Added a compile-time macro (LIBJPEG_TURBO_VERSION) that can
365
be used to check the version of libjpeg-turbo against which
366
an application was compiled.
367
* Added new RGBA/BGRA/ABGR/ARGB colorspace extension constants
368
* libjpeg-turbo will now correctly decompress erroneous
369
CMYK/YCCK JPEGs whose K component is assigned a component ID
370
of 1 instead of 4.
371
* Added SIMD routines for RGB-to-grayscale color conversion
372
* Improved the performance of the C color conversion routines
373
* Added a function to the TurboJPEG API that performs lossless
374
transforms.
375
* Added support for 4:4:0 (transposed 4:2:2) subsampling
376
377
-------------------------------------------------------------------
378
Sat Nov 19 20:38:03 UTC 2011 - coolo@suse.com
379
380
- add libtool as buildrequire to avoid implicit dependency
381
382
-------------------------------------------------------------------
383
Sat Nov 12 22:54:58 UTC 2011 - crrodriguez@opensuse.org
384
385
- Open all file descriptors with O_CLOEXEC, extended description
386
in the patch file.
387
388
-------------------------------------------------------------------
389
Thu May 19 14:44:56 CEST 2011 - pgajdos@suse.cz
390
391
- updated to 1.1.1:
392
* Fixed a 1-pixel error in row 0, column 21 of the luminance
393
plane generated by tjEncodeYUV().
394
* libjpeg-turbo's accelerated Huffman decoder previously
395
ignored unexpected markers found in the middle of the
396
JPEG data stream during decompression. It will now
397
hand off decoding of a particular block to the unaccelerated
398
Huffman decoder if an unexpected marker is found, so that
399
the unaccelerated Huffman decoder can generate an appropriate
400
warning.
401
* Fixed a bug in jpeg_read_coefficients() whereby it would
402
not initialize cinfo->image_width and cinfo->image_height
403
if libjpeg v7 or v8 emulation was enabled. This specifically
404
caused the jpegoptim program to fail if it was linked against
405
a version of libjpeg-turbo that was built with libjpeg v7 or
406
v8 emulation.
407
* Eliminated excessive I/O overhead that occurred when reading
408
BMP files in cjpeg.
409
*
410
411
-------------------------------------------------------------------
412
Thu Mar 3 13:53:18 CET 2011 - pgajdos@suse.cz
413
414
- updated to 1.1.0:
415
* Added further protections against invalid Huffman codes.
416
* Added an extended version of tjDecompressHeader().
417
* Added arithmetic encoding and decoding support.
418
* TurboJPEG/OSS can now compress from/decompress to
419
grayscale bitmaps.
420
* Added emulation of the libjpeg v7 and v8 APIs and ABIs.
421
* Added two new TurboJPEG API functions, tjEncodeYUV() and
422
tjDecompressToYUV().
423
* The TurboJPEG dynamic library now uses versioned symbols.
424
* Fixed visual artifacts in grayscale JPEG compression
425
caused by a typo in the RGB-to-chrominance lookup tables.
426
- see ChangeLog.txt for details.
427
- removed upstreamed jpegtran.patch and rh639672.patch
428
429
-------------------------------------------------------------------
430
Tue Dec 14 14:32:56 CET 2010 - pgajdos@suse.cz
431
432
- spec file cleanup
433
434
-------------------------------------------------------------------
435
Fri Dec 10 13:02:58 UTC 2010 - pgajdos@novell.com
436
437
- this jpeg version will be the default to the prejudice of jpeg8
438
from now on
439
440
-------------------------------------------------------------------
441
Sun Nov 7 12:53:26 UTC 2010 - prusnak@opensuse.org
442
443
- created package based on Fedora one (v 1.0.1)
444
445