Revisions of libjpeg-turbo
buildservice-autocommit
accepted
request 1146098
from
Petr Gajdos (pgajdos)
(revision 154)
baserev update by copy to link target
Petr Gajdos (pgajdos)
accepted
request 1144368
from
Martin Hauke (mnhauke)
(revision 153)
- Update to version 3.0.2 * Fixed a signed integer overflow in the tj3CompressFromYUV8(), tj3DecodeYUV8(), tj3DecompressToYUV8(), and tj3EncodeYUV8() functions, detected by the Clang and GCC undefined behavior sanitizers, that could be triggered by setting the align parameter to an unreasonably large value. This issue did not pose a security threat, but removing the warning made it easier to detect actual security issues, should they arise in the future. * Introduced a new parameter (TJPARAM_MAXMEMORY in the TurboJPEG C API and TJ.PARAM_MAXMEMORY in the TurboJPEG Java API) and a corresponding TJBench option (-maxmemory) for specifying the maximum amount of memory (in megabytes) that will be allocated for intermediate buffers, which are used with progressive JPEG compression and decompression, optimized baseline entropy coding, lossless JPEG compression, and lossless transformation. The new parameter and option serve the same purpose as the max_memory_to_use field in the jpeg_memory_mgr struct in the libjpeg API, the JPEGMEM environment variable, and the cjpeg/djpeg/jpegtran -maxmemory option. * Introduced a new parameter (TJPARAM_MAXPIXELS in the TurboJPEG C API and TJ.PARAM_MAXPIXELS in the TurboJPEG Java API) and a corresponding TJBench option (-maxpixels) for specifying the maximum number of pixels that the decompression, lossless transformation, and packed-pixel image loading functions/methods will process. * Fixed an error ("Unsupported color conversion request") that occurred when attempting to decompress a 3-component lossless JPEG image without an Adobe APP14 marker. The decompressor
buildservice-autocommit
accepted
request 1139079
from
Petr Gajdos (pgajdos)
(revision 152)
baserev update by copy to link target
Petr Gajdos (pgajdos)
accepted
request 1138991
from
Andreas Schwab (Andreas_Schwab)
(revision 151)
- Do not require SIMD support when it does not exist
buildservice-autocommit
accepted
request 1136149
from
Petr Gajdos (pgajdos)
(revision 150)
baserev update by copy to link target
Petr Gajdos (pgajdos)
accepted
request 1136025
from
Dirk Mueller (dirkmueller)
(revision 149)
- update to 3.0.1 (bsc#1211542, CVE-2023-2804): * The x86-64 SIMD functions now use a standard stack frame, prologue, and epilogue so that debuggers and profilers can reliably capture backtraces from within the functions. * Fixed two minor issues in the interblock smoothing algorithm that caused mathematical (but not necessarily perceptible) edge block errors when decompressing progressive JPEG images exactly two MCU blocks in width or that use vertical chrominance subsampling. * The TurboJPEG API now supports 4:4:1 (transposed 4:1:1) chrominance subsampling, which allows losslessly transposed or rotated 4:1:1 JPEG images to be losslessly cropped, partially decompressed, or decompressed to planar YUV images. * Fixed various segfaults and buffer overruns (CVE-2023-2804) * that occurred when attempting to decompress various specially-crafted malformed 12-bit-per-component and 16-bit-per-component lossless JPEG images using color quantization or merged chroma upsampling/color conversion. The underlying cause of these issues was that the color quantization and merged chroma upsampling/color conversion algorithms were not designed with lossless decompression in mind. Since libjpeg-turbo explicitly does not support color conversion when compressing or decompressing lossless JPEG images, merged chroma upsampling/color conversion never should have been enabled for such images. Color quantization is a legacy feature that serves little or no purpose with lossless JPEG images, so it is also now disabled when decompressing such images. (As a result, djpeg can no longer decompress a lossless JPEG image into a GIF image.) * Fixed an oversight in 1.4 beta1[8] that caused various
Petr Gajdos (pgajdos)
committed
(revision 148)
revert
Petr Gajdos (pgajdos)
committed
(revision 147)
- update to 3.0.1 3.0.1 ===== * The x86-64 SIMD functions now use a standard stack frame, prologue, and epilogue so that debuggers and profilers can reliably capture backtraces from within the functions. * Fixed two minor issues in the interblock smoothing algorithm that caused mathematical (but not necessarily perceptible) edge block errors when decompressing progressive JPEG images exactly two MCU blocks in width or that use vertical chrominance subsampling. * Fixed a regression introduced by 3.0 beta2[6] that, in rare cases, caused the C Huffman encoder (which is not used by default on x86 and Arm CPUs) to generate incorrect results if the Neon SIMD extensions were explicitly disabled at build time (by setting the `WITH_SIMD` CMake variable to `0`) in an AArch64 build of libjpeg-turbo. 3.0.0 ===== * The TurboJPEG API now supports 4:4:1 (transposed 4:1:1) chrominance subsampling, which allows losslessly transposed or rotated 4:1:1 JPEG images to be losslessly cropped, partially decompressed, or decompressed to planar YUV images. * Fixed various segfaults and buffer overruns (CVE-2023-2804) that occurred when attempting to decompress various specially-crafted malformed 12-bit-per-component and 16-bit-per-component lossless JPEG images using color quantization or merged chroma upsampling/color conversion. The underlying cause of these issues was that the color quantization and merged chroma upsampling/color conversion algorithms were not designed with lossless decompression in mind. Since libjpeg-turbo explicitly does not support color conversion when compressing or decompressing lossless JPEG images, merged chroma upsampling/color conversion never should have been enabled for such
buildservice-autocommit
accepted
request 1095708
from
Petr Gajdos (pgajdos)
(revision 146)
baserev update by copy to link target
Petr Gajdos (pgajdos)
committed
(revision 145)
Petr Gajdos (pgajdos)
committed
(revision 144)
- merge two spec files into one
Petr Gajdos (pgajdos)
committed
(revision 143)
revert last change
Petr Gajdos (pgajdos)
committed
(revision 142)
- security update - added patches fix CVE-2023-2804 [bsc#1211542], heap-buffer-overflow in h2v2_merged_upsample_internal() at /libjpeg-turbo/jdmrgext.c + libjpeg-turbo-CVE-2023-2804.patch
buildservice-autocommit
accepted
request 1084656
from
Petr Gajdos (pgajdos)
(revision 141)
baserev update by copy to link target
Petr Gajdos (pgajdos)
accepted
request 1084624
from
Dominique Leuenberger (dimstar)
(revision 140)
- Add _multibuild to define 2nd spec file as additional flavor. Eliminates the need for source package links in OBS.
buildservice-autocommit
accepted
request 1071086
from
Petr Gajdos (pgajdos)
(revision 139)
baserev update by copy to link target
Petr Gajdos (pgajdos)
accepted
request 1070184
from
Martin Pluskal (pluskalm)
(revision 138)
- Build AVX2 enabled hwcaps library for x86_64-v3
buildservice-autocommit
accepted
request 1067523
from
Petr Gajdos (pgajdos)
(revision 137)
baserev update by copy to link target
Petr Gajdos (pgajdos)
accepted
request 1066935
from
Paolo Stivanin (polslinux)
(revision 136)
- update to 2.1.5.1: * Fixed a regression introduced by 2.0 beta1[15] that caused a buffer overrun in the progressive Huffman encoder when attempting to transform a specially-crafted malformed 12-bit-per-component JPEG image into a progressive 12-bit-per-component JPEG image using a 12-bit-per-component build of libjpeg-turbo. * Fixed an issue whereby, when using a 12-bit-per-component build of libjpeg-turbo (-DWITH_12BIT=1), passing samples with values greater than 4095 or less than 0 to jpeg_write_scanlines() caused a buffer overrun or underrun in the RGB-to-YCbCr color converter. * Fixed a floating point exception that occurred when attempting to use the jpegtran -drop and -trim options to losslessly transform a specially-crafted malformed JPEG image. * Fixed an issue in tjBufSizeYUV2() whereby it returned a bogus result, rather than throwing an error, if the align parameter was not a power of 2. * Fixed a similar issue in tjCompressFromYUV() whereby it generated a corrupt JPEG image in certain cases, rather than throwing an error, if the align parameter was not a power of 2. * Fixed an issue whereby tjDecompressToYUV2(), which is a wrapper for tjDecompressToYUVPlanes(), used the desired YUV image dimensions rather than the actual scaled image dimensions when computing the plane pointers and strides to pass to tjDecompressToYUVPlanes(). This caused a buffer overrun and subsequent segfault if the desired image dimensions exceeded the scaled image dimensions. * Fixed an issue whereby, when decompressing a 12-bit-per-component JPEG image (-DWITH_12BIT=1) using an alpha-enabled output color space such as JCS_EXT_RGBA, the alpha channel was set to 255 rather than 4095. * Fixed an issue whereby the Java version of TJBench did not accept a range of quality values. * Fixed an issue whereby, when -progressive was passed to TJBench,
buildservice-autocommit
accepted
request 1046153
from
Petr Gajdos (pgajdos)
(revision 135)
baserev update by copy to link target
Displaying revisions 1 - 20 of 154