[Buildroot] [PATCH 1/1] Update Jasper to 2.0.19

Peter Korsgaard peter at korsgaard.com
Mon Aug 3 21:00:22 UTC 2020


>>>>> "Michael" == Michael Vetter <jubalh at iodoru.org> writes:

 > Changes:
 > * Fix CVE-2018-9154
 >   https://github.com/jasper-software/jasper/issues/215
 >   https://github.com/jasper-software/jasper/issues/166
 >   https://github.com/jasper-software/jasper/issues/175
 >   https://github.com/jasper-maint/jasper/issues/8

 > * Fix CVE-2018-19541
 >   https://github.com/jasper-software/jasper/pull/199
 >   https://github.com/jasper-maint/jasper/issues/6

 > * Fix CVE-2016-9399, CVE-2017-13751
 >   https://github.com/jasper-maint/jasper/issues/1

 > * Fix CVE-2018-19540
 >   https://github.com/jasper-software/jasper/issues/182
 >   https://github.com/jasper-maint/jasper/issues/22

 > * Fix CVE-2018-9055
 >   https://github.com/jasper-maint/jasper/issues/9

 > * Fix CVE-2017-13748
 >   https://github.com/jasper-software/jasper/issues/168

 > * Fix CVE-2017-5503, CVE-2017-5504, CVE-2017-5505
 >   https://github.com/jasper-maint/jasper/issues/3
 >   https://github.com/jasper-maint/jasper/issues/4
 >   https://github.com/jasper-maint/jasper/issues/5
 >   https://github.com/jasper-software/jasper/issues/88
 >   https://github.com/jasper-software/jasper/issues/89
 >   https://github.com/jasper-software/jasper/issues/90

 > * Fix CVE-2018-9252
 >   https://github.com/jasper-maint/jasper/issues/16

 > * Fix CVE-2018-19139
 >   https://github.com/jasper-maint/jasper/issues/14

 > * Fix CVE-2018-19543, CVE-2017-9782
 >   https://github.com/jasper-maint/jasper/issues/13
 >   https://github.com/jasper-maint/jasper/issues/18
 >   https://github.com/jasper-software/jasper/issues/140
 >   https://github.com/jasper-software/jasper/issues/182

 > * Fix CVE-2018-20570
 >   https://github.com/jasper-maint/jasper/issues/11
 >   https://github.com/jasper-software/jasper/issues/191

 > * Fix CVE-2018-20622
 >   https://github.com/jasper-maint/jasper/issues/12
 >   https://github.com/jasper-software/jasper/issues/193

 > * Fix CVE-2016-9398
 >   https://github.com/jasper-maint/jasper/issues/10

 > * Fix CVE-2017-14132
 >   https://github.com/jasper-maint/jasper/issues/17

 > * Fix CVE-2017-5499
 >   https://github.com/jasper-maint/jasper/issues/2
 >   https://github.com/jasper-software/jasper/issues/63

 > * Fix CVE-2018-18873
 >   https://github.com/jasper-maint/jasper/issues/15
 >   https://github.com/jasper-software/jasper/issues/184

 > * Fix https://github.com/jasper-software/jasper/issues/207

 > * Fix https://github.com/jasper-software/jasper/issues/194 part 1

 > * Fix CVE-2017-13750
 >   https://github.com/jasper-software/jasper/issues/165
 >   https://github.com/jasper-software/jasper/issues/174

 > * New option -DJAS_ENABLE_HIDDEN=true to not export internal symbols in the public symbol table

 > * Fix various memory leaks

 > * Plenty of code cleanups, and performance improvements

 > Signed-off-by: Michael Vetter <jubalh at iodoru.org>

..
 
 > -JASPER_VERSION = 2.0.16
 > -JASPER_SITE = $(call github,mdadams,jasper,version-$(JASPER_VERSION))
 > +JASPER_VERSION = 2.0.19
 > +JASPER_SITE = $(call github,jasper-software,jasper,version-$(JASPER_VERSION))
 > +#JASPER_SITE = $(call github,jasper-software,jasper,$(JASPER_VERSION))

Don't add commented out lines.

Please clearly mention in the commit message when a version bump fixes
security issues. It would also have been good to mention why the 3
patches were removed and the change to the jasper-software project.

Committed with the commit message reworded to make this clear, thanks.

-- 
Bye, Peter Korsgaard


More information about the buildroot mailing list