main/openjpeg: security upgrade to 2.5.0

This commit is contained in:
J0WI 2022-05-14 12:49:23 +02:00 committed by Francesco Colista
parent 34d90ac838
commit 304af70a9a

View File

@ -1,7 +1,7 @@
# Maintainer: Francesco Colista <fcolista@alpinelinux.org>
pkgname=openjpeg
pkgver=2.4.0
pkgrel=4
pkgver=2.5.0
pkgrel=0
pkgdesc="Open-source implementation of JPEG2000 image codec"
url="https://www.openjpeg.org/"
arch="all"
@ -13,10 +13,12 @@ makedepends="libpng-dev tiff-dev lcms2-dev doxygen cmake samurai"
subpackages="$pkgname-dev $pkgname-tools"
source="https://github.com/uclouvain/openjpeg/archive/v$pkgver/openjpeg-v$pkgver.tar.gz
fix-cmakelists.patch
CVE-2021-29338.patch::https://github.com/uclouvain/openjpeg/commit/b4700bc09d55ac17ff6bef9b0a867f6de527be17.patch
"
# secfixes:
# 2.5.0-r0:
# - CVE-2021-3575
# - CVE-2022-1122
# 2.4.0-r1:
# - CVE-2021-29338
# 2.4.0-r0:
@ -71,7 +73,6 @@ tools() {
}
sha512sums="
55daab47d33823af94e32e5d345b52c251a5410f0c8e0a13b693f17899eedc8b2bb107489ddcba9ab78ef17dfd7cd80d3c5ec80c1e429189cb041124b67e07a8 openjpeg-v2.4.0.tar.gz
08975a2dd79f1e29fd1824249a5fbe66026640ed787b3a3aa8807c2c69f994240ff33e2132f8bf15bbc2202bef7001f98e42d487231d4eebc8e503538658049a openjpeg-v2.5.0.tar.gz
b50cd382d08647db18f202769aae7df87613a18143a30e360e8f00aba1ec1b7fd0a153685dbea3950bc5623b06c314326777c4fb7aff56adfc6b17bc74c933e5 fix-cmakelists.patch
94ca747f6655a9b927d50cceb82529c36e0d4ef3f883b76b7f1aacc0784dce5df3cc7ba21ff888077873e0c3029f0ac505f0c741cbe225edb3880790527f5d81 CVE-2021-29338.patch
"