Accepting request 1033833 from graphics

- Update to 4.0.0:
  * Improve static linking (##336).
  * Fix path relocation in mingw environment (#335).
  * Improve logging and build scripts.
  * Improve JPEG-2000 conformance test results.
  * Enable PIC by default.
  * Fix memory leaks in function cmdopts_parse (#332) (CVE-2022-2963).
  * imgcmp:
    + Add quiet (-q) option.
    + Add debug-level option.
    + Fix memory leak.
    imginfo:
    + Add quiet (-q) option.
  * Fix bug in parsing PGX header.
  * Fix integer overflow bug (#345) (CVE-2022-40755).
- Remove jasper-CVE-2022-2963.patch

OBS-URL: https://build.opensuse.org/request/show/1033833
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/jasper?expand=0&rev=22

baselibs.conf

@@ -1 +1 @@
-libjasper6
+libjasper7

jasper-CVE-2022-2963.patch

@@ -1,20 +0,0 @@
-Index: jasper-version-3.0.6/src/app/jasper.c
-===================================================================
---- jasper-version-3.0.6.orig/src/app/jasper.c
-+++ jasper-version-3.0.6/src/app/jasper.c
-@@ -523,6 +523,7 @@ cmdopts_t *cmdopts_parse(int argc, char
- 			cmdopts->enable_all_formats = 1;
- 			break;
- 		default:
-+			cmdopts_destroy(cmdopts);
- 			badusage();
- 			break;
- 		}
-@@ -541,6 +542,7 @@ cmdopts_t *cmdopts_parse(int argc, char
- 
- 	if (!cmdopts->outfmt_str && !cmdopts->outfile) {
- 		fprintf(stderr, "error: cannot determine output format\n");
-+		cmdopts_destroy(cmdopts);
- 		badusage();
- 	}
- 

jasper.changes

@@ -1,3 +1,23 @@
+-------------------------------------------------------------------
+Sun Nov  6 09:19:20 UTC 2022 - Michael Vetter <mvetter@suse.com>
+
+- Update to 4.0.0:
+  * Improve static linking (##336).
+  * Fix path relocation in mingw environment (#335).
+  * Improve logging and build scripts.
+  * Improve JPEG-2000 conformance test results.
+  * Enable PIC by default.
+  * Fix memory leaks in function cmdopts_parse (#332) (CVE-2022-2963).
+  * imgcmp:
+    + Add quiet (-q) option.
+    + Add debug-level option.
+    + Fix memory leak.
+    imginfo:
+    + Add quiet (-q) option.
+  * Fix bug in parsing PGX header.
+  * Fix integer overflow bug (#345) (CVE-2022-40755).
+- Remove jasper-CVE-2022-2963.patch
+
 -------------------------------------------------------------------
 Fri Sep 16 11:34:42 UTC 2022 - Michael Vetter <mvetter@suse.com>
 

jasper.spec

@@ -20,7 +20,7 @@
 %global __builddir obs_build
 
 Name:           jasper
-Version:        3.0.6
+Version:        4.0.0
 Release:        0
 Summary:        An Implementation of the JPEG-2000 Standard, Part 1
 License:        JasPer-2.0
@@ -28,7 +28,6 @@ Group:          Productivity/Graphics/Convertors
 URL:            https://jasper-software.github.io/jasper
 Source:         https://github.com/jasper-software/jasper/archive/version-%{version}.tar.gz
 Source1:        baselibs.conf
-Patch0:         jasper-CVE-2022-2963.patch
 BuildRequires:  Mesa-libGL-devel
 BuildRequires:  cmake
 BuildRequires:  doxygen
@@ -47,18 +46,18 @@ This package contains an implementation of the image compression
 standard, JPEG-2000, Part 1. It consists of tools for conversion to and
 from the JP2 and JPC formats.
 
-%package -n libjasper6
+%package -n libjasper7
 Summary:        JPEG-2000 library
 Group:          Productivity/Graphics/Convertors
 
-%description -n libjasper6
+%description -n libjasper7
 This package contains libjasper, a library implementing the JPEG-2000
 image compression standard Part 1.
 
 %package -n libjasper-devel
 Summary:        Development files for libjasper, a JPEG-2000 library
 Group:          Productivity/Graphics/Convertors
-Requires:       libjasper6 = %{version}
+Requires:       libjasper7 = %{version}
 Requires:       libjpeg-devel
 
 %description -n libjasper-devel
@@ -67,7 +66,6 @@ image compression standard Part 1.
 
 %prep
 %setup -q -n %{name}-version-%{version}
-%patch0 -p1
 
 %build
 export CFLAGS="%{optflags} -Wall -std=c99 -D_BSD_SOURCE"
@@ -79,8 +77,8 @@ export CFLAGS="%{optflags} -Wall -std=c99 -D_BSD_SOURCE"
 
 %fdupes -s %{buildroot}/%{_docdir}/%{name}
 
-%post -n libjasper6 -p /sbin/ldconfig
-%postun -n libjasper6 -p /sbin/ldconfig
+%post -n libjasper7 -p /sbin/ldconfig
+%postun -n libjasper7 -p /sbin/ldconfig
 
 %files
 %license LICENSE.txt
@@ -94,7 +92,7 @@ export CFLAGS="%{optflags} -Wall -std=c99 -D_BSD_SOURCE"
 %{_bindir}/jiv
 %{_mandir}/man*/*
 
-%files -n libjasper6
+%files -n libjasper7
 %{_libdir}/libjasper*.so.*
 
 %files -n libjasper-devel

version-3.0.6.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c79961bc00158f5b5dc5f5fcfa792fde9bebb024432689d0f9e3f95a097d0ec3
-size 1966126

version-4.0.0.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:977c4c2e4210f4e37313cd2232d99e73d57ab561917b3c060bcdd5e83a0a13f1
+size 1975127