From 73a77e86275f347b8d6ce716e00d1271c6a562f7 Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Mon, 6 Oct 2025 20:03:36 +0200 Subject: jasper: upgrade 4.2.4 -> 4.2.8 The upgrade contains fixes for the following vulenrabilities: CVE-2025-8835, CVE-2025-8836, CVE-2025-8837 Changelog: 4.2.8: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high. 4.2.7: Added some missing range checking on several coding parameters in the JPC encoder. 4.2.6: Added a check for a missing color component in the jas_image_chclrspc function. Fixed a minor build problem related to the use of -Wstrict-prototypes with Clang. 4.2.5: Made a change to a configuration header file in order to avoid undesirable compiler warnings when JasPer is used in C++ code Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj --- meta-oe/recipes-graphics/jasper/jasper_4.2.4.bb | 31 ------------------------- meta-oe/recipes-graphics/jasper/jasper_4.2.8.bb | 29 +++++++++++++++++++++++ 2 files changed, 29 insertions(+), 31 deletions(-) delete mode 100644 meta-oe/recipes-graphics/jasper/jasper_4.2.4.bb create mode 100644 meta-oe/recipes-graphics/jasper/jasper_4.2.8.bb diff --git a/meta-oe/recipes-graphics/jasper/jasper_4.2.4.bb b/meta-oe/recipes-graphics/jasper/jasper_4.2.4.bb deleted file mode 100644 index 4796a85190..0000000000 --- a/meta-oe/recipes-graphics/jasper/jasper_4.2.4.bb +++ /dev/null @@ -1,31 +0,0 @@ -SUMMARY = "Jpeg 2000 implementation" -HOMEPAGE = "https://jasper-software.github.io/jasper/" -LICENSE = "MIT" -LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a80440d1d8f17d041c71c7271d6e06eb" - -SRC_URI = "https://github.com/jasper-software/${BPN}/releases/download/version-${PV}/${BP}.tar.gz" -SRC_URI[sha256sum] = "6a597613d8d84c500b5b83bf0eec06cd3707c23d19957f70354ac2394c9914e7" - -CVE_STATUS[CVE-2015-8751] = "fixed-version: The CPE in the NVD database doesn't reflect correctly the vulnerable versions." - -inherit cmake multilib_header - -do_configure:prepend() { - JAS_STDC_VERSION="$(echo __STDC_VERSION__ | ${CPP} -E -P -)" -} - -EXTRA_OECMAKE:append = " -DJAS_STDC_VERSION=${JAS_STDC_VERSION}" - -PACKAGECONFIG ??= "${@bb.utils.contains('DISTRO_FEATURES', 'opengl x11', 'opengl', '', d)} \ - jpeg" - -PACKAGECONFIG[jpeg] = "-DJAS_ENABLE_LIBJPEG=ON,-DJAS_ENABLE_LIBJPEG=OFF,jpeg," -PACKAGECONFIG[opengl] = "-DJAS_ENABLE_OPENGL=ON,-DJAS_ENABLE_OPENGL=OFF,freeglut," - -do_install:append() { - chrpath -d ${D}${bindir}/jasper - chrpath -d ${D}${bindir}/imginfo - chrpath -d ${D}${bindir}/imgcmp - chrpath -d ${D}${libdir}/libjasper.so.* - oe_multilib_header jasper/jas_config.h -} diff --git a/meta-oe/recipes-graphics/jasper/jasper_4.2.8.bb b/meta-oe/recipes-graphics/jasper/jasper_4.2.8.bb new file mode 100644 index 0000000000..dd3cf3fdb6 --- /dev/null +++ b/meta-oe/recipes-graphics/jasper/jasper_4.2.8.bb @@ -0,0 +1,29 @@ +SUMMARY = "Jpeg 2000 implementation" +HOMEPAGE = "https://jasper-software.github.io/jasper/" +LICENSE = "MIT" +LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a80440d1d8f17d041c71c7271d6e06eb" + +SRC_URI = "https://github.com/jasper-software/${BPN}/releases/download/version-${PV}/${BP}.tar.gz" +SRC_URI[sha256sum] = "98058a94fbff57ec6e31dcaec37290589de0ba6f47c966f92654681a56c71fae" + +inherit cmake multilib_header + +do_configure:prepend() { + JAS_STDC_VERSION="$(echo __STDC_VERSION__ | ${CPP} -E -P -)" +} + +EXTRA_OECMAKE:append = " -DJAS_STDC_VERSION=${JAS_STDC_VERSION}" + +PACKAGECONFIG ??= "${@bb.utils.contains('DISTRO_FEATURES', 'opengl x11', 'opengl', '', d)} \ + jpeg" + +PACKAGECONFIG[jpeg] = "-DJAS_ENABLE_LIBJPEG=ON,-DJAS_ENABLE_LIBJPEG=OFF,jpeg," +PACKAGECONFIG[opengl] = "-DJAS_ENABLE_OPENGL=ON,-DJAS_ENABLE_OPENGL=OFF,freeglut," + +do_install:append() { + chrpath -d ${D}${bindir}/jasper + chrpath -d ${D}${bindir}/imginfo + chrpath -d ${D}${bindir}/imgcmp + chrpath -d ${D}${libdir}/libjasper.so.* + oe_multilib_header jasper/jas_config.h +} -- cgit v1.2.3-54-g00ecf