[vlc-commits] [Git][videolan/vlc][master] contrib: jpeg: update to jpeg-turbo 3.0

[Steve Lhomme (@robUx4)]

Steve Lhomme pushed to branch master at VideoLAN / VLC


Commits:
c48b58de by Tristan Matthews at 2023-07-06T05:27:50+00:00
contrib: jpeg: update to jpeg-turbo 3.0

Notably:
- Fixed various segfaults and buffer overruns (CVE-2023-2804)
- Fixed an issue that caused the C Huffman encoder (which is not used by
  default on x86 and Arm CPUs) to read from uninitialized memory when
  attempting to transform a specially-crafted malformed arithmetic-coded
  JPEG source image into a baseline Huffman-coded JPEG destination image.

Release notes:
https://github.com/libjpeg-turbo/libjpeg-turbo/releases/tag/3.0.0

- - - - -


2 changed files:

- contrib/src/jpeg/SHA512SUMS
- contrib/src/jpeg/rules.mak


Changes:

=====================================
contrib/src/jpeg/SHA512SUMS
=====================================
@@ -1 +1 @@
-944004c5aec90695edde02ef88b5950683f006a90f9eb4fac40a3ef5cbfb2767344f962dd6a5342f5ea239e361d30ebd5960d0d16d1d68079602ccd745bcbadc  libjpeg-turbo-2.0.8-esr.tar.gz
+0efb7ce16333f4f3556b889bdd83b0f91697ce1645cbfb13db0c8a93ef47dd9cb0805c7160edaf946d4d54faf30a33bae90800c189e8b4bd44fcf3ce98179115  libjpeg-turbo-3.0.0.tar.gz


=====================================
contrib/src/jpeg/rules.mak
=====================================
@@ -1,6 +1,6 @@
 # jpeg
 
-JPEG_VERSION := 2.0.8-esr
+JPEG_VERSION := 3.0.0
 JPEG_URL := $(GITHUB)/libjpeg-turbo/libjpeg-turbo/archive/refs/tags/$(JPEG_VERSION).tar.gz
 
 $(TARBALLS)/libjpeg-turbo-$(JPEG_VERSION).tar.gz:



View it on GitLab: https://code.videolan.org/videolan/vlc/-/commit/c48b58ded7b678c2d624f3882638ea12df3f872b

-- 
View it on GitLab: https://code.videolan.org/videolan/vlc/-/commit/c48b58ded7b678c2d624f3882638ea12df3f872b
You're receiving this email because of your account on code.videolan.org.


VideoLAN code repository instance