linux/meta-openembedded.git/meta-oe/recipes-graphics/openjpeg, branch dunfell

openjpeg: Whitelist CVE-2020-27844 and CVE-2015-1239

2022-05-26T02:34:39+00:00

Whitelist CVE-2020-27844 as it is introduced by https://github.com/uclouvain/openjpeg/commit/4edb8c83374f52cd6a8f2c7c875e8ffacccb5fa5 but the contents of this patch is not present in openjpeg_2.3.1 Link: https://security-tracker.debian.org/tracker/CVE-2020-27844 Whitelist CVE-2015-1239 as the CVE description clearly states that j2k_read_ppm_v3 function in openjpeg is affected due to CVE-2015-1239 but in openjpeg_2.3.1 this function is not present. Hence, CVE-2015-1239 does not affect openjpeg_2.3.1. Signed-off-by: Sana.Kazi Signed-off-by: Sana Kazi Signed-off-by: Armin Kuster

openjpeg: Fix multiple CVE

2022-03-27T15:18:20+00:00

Add patch to fix below CVE: CVE-2019-12973 CVE-2020-15389 CVE-2020-27814 CVE-2020-27823 CVE-2020-27824 CVE-2020-27841 CVE-2020-27842 CVE-2020-27843 CVE-2020-27845 Signed-off-by: Virendra Thakur Signed-off-by: Sana Kazi Signed-off-by: Armin Kuster

recipes: Update SRC_URI branch and protocols

2021-11-17T20:26:21+00:00

This patch updates SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls as generated by the conversion script in OE-Core. Signed-off-by: Armin Kuster

openjpeg: Fix CVE-2020-8112

2020-03-18T02:46:35+00:00

Backport from upstream to fix heap-based buffer overflow. Upstream-Status: Backport CVE: CVE-2020-8112 Signed-off-by: Sakib Sajal Signed-off-by: Khem Raj

openjpeg: Fix CVE-2020-6851

2020-03-11T22:30:18+00:00

Backport patch from upstream to fix heap-based buffer overflow Upstream-Status: Backport CVE: CVE-2020-6851 Signed-off-by: Yue Tao Signed-off-by: Sakib Sajal Signed-off-by: Khem Raj

openjpeg: Clarify BSD license variant

2019-10-17T15:35:32+00:00

The License of openjpeg is BSD-2-Clause. Signed-off-by: Christophe Priouzeau Signed-off-by: Khem Raj

openjpeg: upgrade 2.3.0 -> 2.3.1

2019-09-17T01:24:48+00:00

Upgrading fixes CVE-2018-21010 and incorporates other bug fixes from upstream. The source upgrade to 2.3.1 changed the way include directories are identified, so the patch 0001-Ensure-cmake-files-are-installed-at-common-location.patch is no longer needed to help poppler find cmake files. The contents of /usr/lib/openjpeg-2.3 were added to the FILES list since poppler needs them to build. Signed-off-by: Trevor Gamblin Signed-off-by: Khem Raj

openjpeg: fix build for multilib

2018-12-22T23:37:35+00:00

| ERROR: openjpeg-2.3.0-r0 do_package: QA Issue: openjpeg: Files/directories were installed but not shipped in any package: | /usr/lib/libopenjp2.a | /usr/lib/libopenjp2.so | /usr/lib/libopenjp2.so.2.3.0 | /usr/lib/libopenjp2.so.7 | /usr/lib/cmake | /usr/lib/pkgconfig | /usr/lib/cmake/openjpeg-2.3 | /usr/lib/cmake/openjpeg-2.3/OpenJPEGConfig.cmake | /usr/lib/cmake/openjpeg-2.3/OpenJPEGTargets.cmake | /usr/lib/cmake/openjpeg-2.3/OpenJPEGTargets-noconfig.cmake | /usr/lib/pkgconfig/libopenjp2.pc * Addresses [1] * Build tested with poppler in multilib and non-multilib environment [1] https://github.com/openembedded/meta-openembedded/issues/103 Signed-off-by: Andreas Müller Signed-off-by: Khem Raj

openjpeg: cmake fixes to prepare update of poppler

2018-10-04T15:52:54+00:00

* Move *,cmake from ${libdir}/cmake to ${libdir}/cmake/ That is standard location cmake files are installed. * Do not export executables - they will not be found in dependant's sysroot Signed-off-by: Andreas Müller Signed-off-by: Khem Raj

openjpeg: upgrade 2.2.0 -> 2.3.0

2018-08-21T23:20:36+00:00

* fetch by git to avoid github checksum surprises * 0001-bmp_read_info_header-reject-bmp-files-with-biBitCoun.patch was applied upstream Signed-off-by: Andreas Müller Signed-off-by: Khem Raj