linux/meta-openembedded.git/meta-oe/recipes-graphics/openjpeg, branch kirkstone

openjpeg: Fix CVE-2025-50952

2025-09-06T14:27:59+00:00

Upstream commit: https://github.com/uclouvain/openjpeg/commit/d903fbb4ab9ccf9b96c8bc7398fafc0007505a37 Signed-off-by: Vijay Anusuri Signed-off-by: Gyorgy Sarvari

openjpeg: Backport fix CVE-2023-39327

2025-02-09T15:55:02+00:00

Upstream commit: https://github.com/uclouvain/openjpeg/commit/c58bc128b4f770e7c89bc8ba3d0273b9a3904aad Reference: https://github.com/uclouvain/openjpeg/pull/1547 Signed-off-by: Vijay Anusuri Signed-off-by: Armin Kuster

openjpeg: fix CVE-2024-56827

2025-01-23T00:25:59+00:00

CVE-2024-56827: A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2024-56827] [https://github.com/uclouvain/openjpeg/issues/1564] Upstream patches: [https://github.com/uclouvain/openjpeg/commit/e492644fbded4c820ca55b5e50e598d346e850e8] Signed-off-by: Zhang Peng Signed-off-by: Armin Kuster

openjpeg: fix CVE-2024-56826

2025-01-23T00:25:56+00:00

CVE-2024-56826: A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior. Reference: [https://nvd.nist.gov/vuln/detail/CVE-2024-56826] [https://github.com/uclouvain/openjpeg/issues/1563] Upstream patches: [https://github.com/uclouvain/openjpeg/commit/98592ee6d6904f1b48e8207238779b89a63befa2] Signed-off-by: Zhang Peng Signed-off-by: Armin Kuster

openjpeg: Backport fix CVE-2021-3575

2024-03-25T11:11:05+00:00

Upstream-Status: Backport from https://github.com/uclouvain/openjpeg/commit/7bd884f8750892de4f50bf4642fcfbe7011c6bdf Signed-off-by: Vivek Kumbhar Signed-off-by: Armin Kuster

meta-oe: Drop broken BBCLASSEXTEND variants

2023-11-17T15:49:04+00:00

The command "bitbake universe -c fetch" currently throws a ton of warnings as there are many 'impossible' dependencies. In some cases these variants may never have worked and were just added by copy and paste of recipes. In some cases they once clearly did work but became broken somewhere along the way. Users may also be carrying local bbappend files which add further BBCLASSEXTEND. Having universe fetch work without warnings is desireable so clean up the broken variants. Anyone actually needing something dropped here can propose adding it and the correct functional dependencies back quite easily. This also then ensures we're not carrying or fixing things nobody uses. Signed-off-by: Richard Purdie Signed-off-by: Khem Raj (cherry picked from commit 9962d57f7c235873de0a0bb192b5f56747762fc7) Backport: * Updated paths to follow PV changes * Adapted modified recipes to the ones generating warnings Signed-off-by: Yoann Congal Signed-off-by: Armin Kuster

openjpeg: ignore CVE-2015-1239

2022-07-26T14:08:00+00:00

This CVE is patched in our version of openjpeg. The NVD database doesn't include a version range this is why it's still reported. Signed-off-by: Davide Gardenal

openjpeg: fix CVE-2022-1122

2022-04-15T02:42:10+00:00

CVE: CVE-2022-1122 The defect is undergoing reanalysis and there may be follow-up commits. Ref: * https://github.com/uclouvain/openjpeg/issues/1368 Signed-off-by: Nicolas Marguet Signed-off-by: Khem Raj

openjpeg: fix CVE-2021-29338

2022-02-16T16:26:02+00:00

CVE: CVE-2021-29338 Ref: * https://github.com/uclouvain/openjpeg/issues/1338 Signed-off-by: Kai Kang Signed-off-by: Khem Raj

recipes: Update SRC_URI branch and protocols

2021-11-03T13:57:49+00:00

This patch updates SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls as generated by the conversion script in OE-Core. Signed-off-by: Richard Purdie Signed-off-by: Khem Raj