From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4dwXv912Tcz34Pb for ; Tue, 20 Jan 2026 16:33:25 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4dwXv11dtpz32Xd for ; Tue, 20 Jan 2026 16:33:17 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4dwXv06w2Gz3Mb; Tue, 20 Jan 2026 16:33:16 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1768926797; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=8gmxhyBiC15Lv2ck81GYdYgGtMeK4G7yzXURg/8fBGw=; b=fTPHlG1KlUqqciN2p688hLvpzQp0GZs297l72qGSUmHMMsGjhYYsd6fTMbtPz7V8x7kSSs NyZkQyKH+cVWEqCw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1768926797; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=8gmxhyBiC15Lv2ck81GYdYgGtMeK4G7yzXURg/8fBGw=; b=P1aSdQ4u1XTON3bRzG5ZP5/dpVYfaeAjVDy6Shpy8EHt5FSu+1Cn+JcWpPgnIM6HDDmSyA y736sfOiKvSdQyWsoZog3S3wdvt/B/VXM5eXGrcjsO5pvnmqLx4drRTc0tUM6nelIfGji2 xCFd5RTmdMj+NlFeDthxDH1vT/wgSJ7zyhDKvH8/j5f9NNNfGq/QhJF25RpbK+cuRCNL5K wovYaObUJ2dNPcRWu1VjXPfd9kDF1Uh7AB4183dY+LaQkgYBKr1zfaMu09yhbTrK6H9lsL NjE1UTvNR3f3iJWmE7TODM0AArR4xtkV/jErO9nD6MHMGYn57sVU/6Uuk5O0CQ== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] libjpeg: Update to version 3.1.3 Date: Tue, 20 Jan 2026 17:33:11 +0100 Message-ID: <20260120163311.3763307-9-adolf.belka@ipfire.org> In-Reply-To: <20260120163311.3763307-1-adolf.belka@ipfire.org> References: <20260120163311.3763307-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit - Update from version 3.1.1 to 3.1.3 - No change to rootfile - Changelog 3.1.3 Significant changes relative to 3.1.2: 1. Hardened the TurboJPEG API against hypothetical applications that may erroneously call `tj*Compress*()` or `tj*Transform()` with a reused JPEG destination buffer pointer while specifying a destination buffer size of 0. 2. Hardened the TurboJPEG API against hypothetical applications that may erroneously set `TJPARAM_LOSSLESS` or `TJPARAM_COLORSPACE` prior to calling `tj3EncodeYUV*8()` or `tj3CompressFromYUV*8()`. `tj3EncodeYUV*8()` and `tj3CompressFromYUV*8()` now ignore `TJPARAM_LOSSLESS` and `TJPARAM_COLORSPACE`. 3. Hardened the TurboJPEG Java API against hypothetical applications that may erroneously pass huge X or Y offsets to one of the compression, YUV encoding, decompression, or YUV decoding methods, leading to signed integer overflow in the JNI wrapper's buffer size checks that rendered those checks ineffective. 4. Fixed an issue in the TurboJPEG Java API whereby `TJCompressor.getSourceBuf()` sometimes returned the buffer from a previous invocation of `TJCompressor.loadSourceImage()` if the target data precision was changed before the most recent invocation. 5. Fixed an issue in the PPM reader that caused incorrect pixels to be generated when using `tj3LoadImage*()` or `TJCompressor.loadSourceImage()` to load a PBMPLUS (PPM/PGM) file into a CMYK buffer with a different data precision than that of the file. 3.1.2 Significant changes relative to 3.1.1: 1. Fixed a regression introduced by 3.1 beta1[5] that caused a segfault in TJBench if `-copy` or `-c` was passed as the last command-line argument. 2. The build system now uses wrappers rather than CMake object libraries to compile source files for multiple data precisions. This improves code readability and facilitates adapting the libjpeg-turbo source code to non-CMake build systems. 3. Fixed an issue whereby decompressing a 4:2:0 or 4:2:2 JPEG image with merged upsampling disabled/one-pass color quantization enabled, then reusing the same API instance to decompress a 4:2:0 or 4:2:2 JPEG image with merged upsampling enabled/color quantization disabled, caused `jpeg_skip_scanlines()` to use freed memory. In practice, the freed memory was not reclaimed before it was used. Thus, this issue did not cause a segfault or other user-visible errant behavior (it was only detectable with ASan), and it did not likely pose a security risk. 4. The AArch64 (Arm 64-bit) Neon SIMD extensions and accelerated Huffman codec now support the Arm64EC ABI on Windows, which allows Windows/x64 applications to call native Arm64 functions when running under the Windows/x64 emulator on Windows/Arm. Signed-off-by: Adolf Belka --- lfs/libjpeg | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/libjpeg b/lfs/libjpeg index a2fbea304..da4c04536 100644 --- a/lfs/libjpeg +++ b/lfs/libjpeg @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2025 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 3.1.1 +VER = 3.1.3 THISAPP = libjpeg-turbo-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 813781b1c91ed132b2d1b6e3d7834673e202765362cc9e77a6e7d4a92e89c0192312405ae8197e1c306ad3c89e23cd6dc5e418bb9f3570f110014ab79f717401 +$(DL_FILE)_BLAKE2 = 3c675aa56b3474ca8a27f355d14dd7411d90471564c5916884e87818b7165e73a6c6b416dc2800e31c10dd1390ae88353e81d80eceb2e22c00b6a81ac5cf3d65 install : $(TARGET) -- 2.52.0