~ubuntu-branches/ubuntu/raring/libjpeg-turbo/raring-security : changes

~ubuntu-branches/ubuntu/raring/libjpeg-turbo/raring-security » Changes from revision 10

From Revision 10

Rev	Summary	Authors	Tags	Date
10	* SECURITY UPDATE: information disclosure via uninitialized ... * SECURITY UPDATE: information disclosure via uninitialized memory in the get_sos function (LP: #1252912) - debian/patches/CVE-2013-6629.patch: check for duplications in jdmarker.c. - CVE-2013-6629 * SECURITY UPDATE: information disclosure via uninitialized memory in the get_dht function (LP: #1252912) - debian/patches/CVE-2013-6630.patch: properly clear out memory in jdmarker.c. - CVE-2013-6630	Marc Deslauriers	1.2.1-0ubuntu2.13.04.1	10 years ago
9	libjpeg-turbo-test: Depend on libjpegturbo. LP: #1053273. libjpeg-turbo-test: Depend on libjpegturbo. LP: #1053273.	Matthias Klose	1.2.1-0ubuntu2	11 years ago
8	[ Tom Gall ] [ Tom Gall ] * Update to stable 1.2.1. LP: #1012861. * Addresses CVE-2012-2806. LP: #1025537. A Heap-based buffer overflow was found in the way libjpeg-turbo decompressed certain corrupt JPEG images in which the component count was erroneously set to a large value. An attacker could create a specially-crafted JPEG image that, when opened, could cause an application using libpng to crash or, possibly, execute arbitrary code with the privileges of the user running the application. * Cosmetic fixes to argument lists * Added flags to the TurboJPEG API that allow the caller to force the use of either the fast or the accurate DCT/IDCT algorithms in the underlying codec. * More recent versions of autoconf add -traditional-cpp to the CPP flags, which causes jsimdcfg.inc.h to not preprocess correctly unless we expand all of the instances of the #definev macro. * Fixed regression caused by a bug in the 32-bit strict memory access code in jdmrgss2.asm (contributed by Chromium to stop valgrind from whining whenever the output buffer size was not evenly divisible by 16 bytes.) On Linux/x86, this regression generated incorrect pixels on the right-hand side of images whose rows were not 16-byte aligned, whenever fancy upsampling was used. This patch also enables the strict memory access code on all platforms, not just Linux (it does no harm on other platforms) and removes a couple of pcmpeqb instructions that were rendered unnecessary by r835. * Accelerated 4:2:2 upsampling routine for ARM (improves performance ~20-30% when decompressing 4:2:2 JPEGs using fancy upsampling) * Eliminate the use of the MASKMOVDQU instruction, to speed up decompression performance by 10x on AMD Bobcat embedded processors (and ~5% on AMD desktop processors.) * add tjbench to libjpeg-turbo-test packages * Guard against num_components being a ridiculous value due to a corrupt header * Preserve all 128 bits of xmm6 and xmm7 [ Matthias Klose ] * Prepare the package for quantal, basing on the 1.2.1 release tarball. * d/patches/branch-updates.diff: Update to 20120919 of the 1.2.x branch, but don't bump the version to 1.2.2. * d/patches/guard-inline-define: Remove, integrated upstream.	Matthias Klose	1.2.1-0ubuntu1	11 years ago
7	Strip -Wl,-Bsymbolic-functions out of LDFLAGS, so that hpcup... Strip -Wl,-Bsymbolic-functions out of LDFLAGS, so that hpcups and pxljr can override jinit_color_converter. LP: #777670.	Steve Langasek	1.1.90+svn733-0ubuntu6	11 years ago
6	Guard the definition of INLINE in an ifndef block, so that Guard the definition of INLINE in an ifndef block, so that third parties including our headers don't get it redefined unexpectedly from under them (which cause the spice FTBFS)	Adam Conrad	1.1.90+svn733-0ubuntu5	11 years ago
5	* Install jpegint.h in the -dev package. * Install jpegint.h in the -dev package. * Install jconfig.h in the multiarch include directory.	Matthias Klose	1.1.90+svn733-0ubuntu4	12 years ago
4	libjpeg-turbo-progs: Remove dependency on libturbojpeg. libjpeg-turbo-progs: Remove dependency on libturbojpeg.	Matthias Klose	1.1.90+svn733-0ubuntu3	12 years ago
3	* Sync with upstream to svn733. * Sync with upstream to svn733. * Rename libjpeg-test to libjpeg-turbo-test. * Rename libjpeg-turbo-dbg to libjpeg-turbo8-dbg. * Rename libjpeg8-dev to libjpeg-turbo8-dev. * Move the docs into the -dev package, install the upstream changelog in the -dev only. * Split out libturbojpeg.so into it's own package, don't let libjpeg-turbo8-dev depend on it. * Fix libjpeg-turbo8-dbg package description. * Install jconfig.h into multiarch include path. * Remove HAVE_STD{LIB,DEF}_H from jconfig.h since they are not used and conflict with autoconf. * libjpeg-turbo8: - Add a symbols file, with a different version for symbols only found in the libjpeg-turbo implementation. - Remove the shlibs file. - Breaks/Replaces libjpeg8 (<< 8c-2ubuntu5). * Copy the exifautotran and jpegexiforient tools from the libjpeg8 sources, install into libjpeg-turbo-progs. * Don't install tjbench in libjpeg-turbo-progs to avoid dependency on libturbojpeg.	Matthias Klose	1.1.90+svn733-0ubuntu2	12 years ago
2	* Initial Release based on svn 702 * Initial Release based on svn 702 * Initial Release and packaging based on svn 702 (LP: #852207)	Tom Gall	1.1.90+svn702-0ubuntu1	12 years ago
1	Import upstream version 1.1.90+svn702 Import upstream version 1.1.90+svn702	Tom Gall	upstream-1.1.90+svn702	12 years ago