summaryrefslogtreecommitdiffstats
path: root/meta-oe/recipes-graphics/openjpeg/openjpeg_2.3.1.bb
Commit message (Collapse)AuthorAgeFilesLines
* openjpeg: Whitelist CVE-2020-27844 and CVE-2015-1239Sana Kazi2022-05-251-0/+14
| | | | | | | | | | | | | | | | | Whitelist CVE-2020-27844 as it is introduced by https://github.com/uclouvain/openjpeg/commit/4edb8c83374f52cd6a8f2c7c875e8ffacccb5fa5 but the contents of this patch is not present in openjpeg_2.3.1 Link: https://security-tracker.debian.org/tracker/CVE-2020-27844 Whitelist CVE-2015-1239 as the CVE description clearly states that j2k_read_ppm_v3 function in openjpeg is affected due to CVE-2015-1239 but in openjpeg_2.3.1 this function is not present. Hence, CVE-2015-1239 does not affect openjpeg_2.3.1. Signed-off-by: Sana.Kazi <Sana.Kazi@kpit.com> Signed-off-by: Sana Kazi <sanakazisk19@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* openjpeg: Fix multiple CVESana Kazi2022-03-271-0/+13
| | | | | | | | | | | | | | | | | Add patch to fix below CVE: CVE-2019-12973 CVE-2020-15389 CVE-2020-27814 CVE-2020-27823 CVE-2020-27824 CVE-2020-27841 CVE-2020-27842 CVE-2020-27843 CVE-2020-27845 Signed-off-by: Virendra Thakur <virendra.thakur@kpit.com> Signed-off-by: Sana Kazi <sanakazisk19@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* recipes: Update SRC_URI branch and protocolsArmin Kuster2021-11-171-1/+1
| | | | | | | | This patch updates SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls as generated by the conversion script in OE-Core. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* openjpeg: Fix CVE-2020-8112Sakib Sajal2020-03-171-0/+1
| | | | | | | | | | Backport from upstream to fix heap-based buffer overflow. Upstream-Status: Backport CVE: CVE-2020-8112 Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openjpeg: Fix CVE-2020-6851Yue Tao2020-03-111-0/+1
| | | | | | | | | | | Backport patch from upstream to fix heap-based buffer overflow Upstream-Status: Backport CVE: CVE-2020-6851 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Sakib Sajal <Sakib.Sajal@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openjpeg: Clarify BSD license variantChristophe PRIOUZEAU2019-10-171-1/+1
| | | | | | | The License of openjpeg is BSD-2-Clause. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openjpeg: upgrade 2.3.0 -> 2.3.1Trevor Gamblin2019-09-161-0/+20
Upgrading fixes CVE-2018-21010 and incorporates other bug fixes from upstream. The source upgrade to 2.3.1 changed the way include directories are identified, so the patch 0001-Ensure-cmake-files-are-installed-at-common-location.patch is no longer needed to help poppler find cmake files. The contents of /usr/lib/openjpeg-2.3 were added to the FILES list since poppler needs them to build. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>