Changelog for
libopenjp2-7-2.5.3-2.1.i586.rpm :
* Mon Dec 16 2024 Michael Vetter
- Update to 2.5.3:
* No API/ABI break compared to v2.5.2 New Features:
* Use TLM (Tile Length Marker) segments to optimize decoding #1538
* Add AVX2 and AVX512 optimization #1552
* Support setting enumcs for CMYK and EYCC color space #1529 Bug fixes:
* Do not turn on \'TPsot==TNsot detection fix\' when TNsot==1, and add a OPJ_DPARAMETERS_DISABLE_TPSOT_FIX flag to disable it #1560
* opj_j2k_setup_encoder(): set numgbits = 1 for Cinema2K #1559
* fix: when EPH markers are specified, they are required. #1547
* sycc422_to_rgb(): fix out-of-bounds read accesses when 2
* width_component_1_or_2 + 1 == with_component_0 #1566
* Avoid heap-buffer-overflow read on corrupted image in non-strict mode #1536
* opj_j2k_read_sod(): validate opj_stream_read_data() return to avoid potential later heap-buffer-overflow in in opj_t1_decode_cblk when disabling strict mode #1534
* fix integer Overflow at j2k.c:9614 #1530
* Memory leak fixes in error code path of opj_compress #1567
* opj_j2k_decode_tiles(): avoid use of uninitialized l_current_tile_no variable #1528
* Do not allow header length to be zero in non-zero length packet #1526
* Fix building on OpenBSD big endian hosts #1520 Changes in third party components:
* thirdparty/libz: update to zlib-1.3.1 #1542
* thirdparty/libpng: update to libpng-1.6.43 #1541
* thirdparty/libtiff: update to libtiff 4.6.0 #1540- fixes CVE-2024-56826 [bsc#1235029]
* Fri Aug 16 2024 Manfred Hollstein - Make version check for the work around reliable to not silently match Factory/Tumbleweed.
* Fri Aug 16 2024 Manfred Hollstein - Work around a bug by cmake installing docs into the wrong directory when building for openSUSE Leap 15.5
* Wed Feb 28 2024 Michael Vetter - Update to 2.5.2:
* Make sure openjpeg.h includes opj_config.h #1514
* Tue Feb 27 2024 Michael Vetter - Update to 2.5.1:
* CMake: drop support for cmake < 3.5
* Several bugfixes, including #1509 for CVE-2021-3575 (bsc#1187048)
* Significant speed-up rate allocation by rate/distoratio ratio #1440- Set devel-doc subpackage to noarch- Change cmake parameters (see c7bccf)
* Wed Mar 08 2023 Martin Pluskal - Build AVX2 enabled hwcaps library for x86_64-v3
* Fri Jun 03 2022 Timothy Brown - update to 2.5.0:
* Encoder: add support for generation of TLM markers
* Decoder: add support for high throughput (HTJ2K) decoding
* Decoder: add support for partial bitstream decoding
* Bug fixes (including security fixes)
* Fix CVE-2018-16376 (bsc#1106881)
* Fix CVE-2021-29338 (bsc#1184774)
* Fix CVE-2022-1122 (bsc#1197738)
* Mon Jan 18 2021 Dirk Müller - update to 2.4.0:
* Encoder: add support for multithreading #1248
* Encoder: add support for generation of PLT markers #1246
* Encoder: single-threaded performance improvements in forward DWT for 5-3 and 9-7 (and other improvements) #1253
* Encoder: support IMF profiles #1235
* Many bug fixes (including security fixes)
* Fix CVE-2020-27814 (bsc#1179594)
* Fix CVE-2020-27824 (bsc#1179821)
* Fix CVE-2020-27841 (bsc#1180042)
* Fix CVE-2020-27842 (bsc#1180043)
* Fix CVE-2020-27843 (bsc#1180044)
* Fix CVE-2020-27845 (bsc#1180046)
* Fix CVE-2020-15389 (bsc#1173578)
* Fix CVE-2020-27823 (bsc#1180457)- drop 024b8407392cb0b8.patch, 05f9b91e60debda0.patch, 21399f6b7d318fcd.patch, 3aef207f90e937d4.patch, 4cb1f663049aab96.patch: upstream
* Fri Jan 31 2020 Stefan Brüns - Fix several security relevant bugs:
* 21399f6b7d318fcd.patch (like CVE-2018-6616, but rle4 instead of rle8, bsc#1079845)
* 3aef207f90e937d4.patch (CVE-2019-12973, bsc#1140359)
* 4cb1f663049aab96.patch (OSS-fuzz, https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18979)
* 024b8407392cb0b8.patch (CVE-2020-6851, bsc#1160782)
* 05f9b91e60debda0.patch (CVE-2020-8112, bsc#1162090)- Use upstream pkgconfig file- Move API documentation from devel package to devel-doc
* Tue Apr 02 2019 mvetterAATTsuse.com- Update to version 2.3.1:
* Fix CVE-2018-6616 (bsr#1079845)
* Fix CVE-2018-5785 (bsc#1076967)
* Fix CVE-2018-18088 (bsc#1111638)
* Fix CVE-2018-16375 (bsc#1106882)
* Fix CVE-2018-14423 (bsc#1102016)
* Fix CVE-2018-7648 (bsc#1083901)
* Fix CVE-2018-5727 (bsc#1076314)
* Fix CVE-2018-20846 (bsc#1140205)
* Fix CVE-2018-21010 (bsc#1149789)
* Fix CVE-2018-20845 (bsc#1140130)
* For full list see ChangeLog file- Remove install-fix.patch: upstreamed
