diff mbox series

[meta-oe,scarthgap,18/18] jasper: upgrade to 4.1.2 release

Message ID 20251014205402.1487867-18-ankur.tyagi85@gmail.com
State New
Headers show
Series [meta-oe,scarthgap,01/18] dash: set CVE_PRODUCT | expand

Commit Message

Ankur Tyagi Oct. 14, 2025, 8:54 p.m. UTC 
Bugfixes including CVE-2023-51257
https://github.com/jasper-software/jasper/compare/version-4.1.1...version-4.1.2

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
 .../recipes-graphics/jasper/jasper_4.1.1.bb   |  2 +-
 .../recipes-graphics/jasper/jasper_4.1.2.bb   | 35 +++++++++++++++++++
 2 files changed, 36 insertions(+), 1 deletion(-)
 create mode 100644 meta-oe/recipes-graphics/jasper/jasper_4.1.2.bb

Comments

Gyorgy Sarvari Oct. 14, 2025, 9:13 p.m. UTC | #1 
On 10/14/25 22:54, Ankur Tyagi via lists.openembedded.org wrote:
> Bugfixes including CVE-2023-51257
> https://github.com/jasper-software/jasper/compare/version-4.1.1...version-4.1.2
>
> Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
> ---
>  .../recipes-graphics/jasper/jasper_4.1.1.bb   |  2 +-
>  .../recipes-graphics/jasper/jasper_4.1.2.bb   | 35 +++++++++++++++++++

It looks like the original recipe (v4.1.1) wasn't deleted

>  2 files changed, 36 insertions(+), 1 deletion(-)
>  create mode 100644 meta-oe/recipes-graphics/jasper/jasper_4.1.2.bb
>
> diff --git a/meta-oe/recipes-graphics/jasper/jasper_4.1.1.bb b/meta-oe/recipes-graphics/jasper/jasper_4.1.1.bb
> index 5281980ecb..d6d5b5de32 100644
> --- a/meta-oe/recipes-graphics/jasper/jasper_4.1.1.bb
> +++ b/meta-oe/recipes-graphics/jasper/jasper_4.1.1.bb
> @@ -4,7 +4,7 @@ LICENSE = "MIT"
>  LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a80440d1d8f17d041c71c7271d6e06eb"
>  
>  SRC_URI = "git://github.com/jasper-software/jasper.git;protocol=https;branch=master"
> -SRCREV = "917f7708b755d8434f70618108c1a76f1b6a0a82"
> +SRCREV = "ff633699cb785967a2cb0084d89d56e53c46e416"
>  
>  CVE_STATUS[CVE-2015-8751] = "fixed-version: The CPE in the NVD database doesn't reflect correctly the vulnerable versions."
>  
> diff --git a/meta-oe/recipes-graphics/jasper/jasper_4.1.2.bb b/meta-oe/recipes-graphics/jasper/jasper_4.1.2.bb
> new file mode 100644
> index 0000000000..d4dae1f22a
> --- /dev/null
> +++ b/meta-oe/recipes-graphics/jasper/jasper_4.1.2.bb
> @@ -0,0 +1,35 @@
> +SUMMARY = "Jpeg 2000 implementation"
> +HOMEPAGE = "https://jasper-software.github.io/jasper/"
> +LICENSE = "MIT"
> +LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a80440d1d8f17d041c71c7271d6e06eb"
> +
> +SRC_URI = "git://github.com/jasper-software/jasper.git;protocol=https;branch=master"
> +SRCREV = "ff633699cb785967a2cb0084d89d56e53c46e416"
> +
> +CVE_STATUS[CVE-2015-8751] = "fixed-version: The CPE in the NVD database doesn't reflect correctly the vulnerable versions."
> +CVE_STATUS[CVE-2023-51257] = "fixed-version: patch is already included in sources"
> +
> +S = "${WORKDIR}/git"
> +
> +inherit cmake multilib_header
> +
> +do_configure:prepend() {
> +	JAS_STDC_VERSION="$(echo __STDC_VERSION__ | ${CPP} -E -P -)"
> +}
> +
> +EXTRA_OECMAKE:append = " -DJAS_STDC_VERSION=${JAS_STDC_VERSION}"
> +
> +PACKAGECONFIG ??= "${@bb.utils.contains('DISTRO_FEATURES', 'opengl x11', 'opengl', '', d)} \
> +		   jpeg"
> +
> +PACKAGECONFIG[jpeg] = "-DJAS_ENABLE_LIBJPEG=ON,-DJAS_ENABLE_LIBJPEG=OFF,jpeg,"
> +PACKAGECONFIG[opengl] = "-DJAS_ENABLE_OPENGL=ON,-DJAS_ENABLE_OPENGL=OFF,freeglut,"
> +
> +do_install:append() {
> +    chrpath -d ${D}${bindir}/jasper
> +    chrpath -d ${D}${bindir}/imginfo
> +    chrpath -d ${D}${bindir}/imgcmp
> +    chrpath -d ${D}${libdir}/libjasper.so.*
> +    oe_multilib_header jasper/jas_config.h
> +}
> +
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#120651): https://lists.openembedded.org/g/openembedded-devel/message/120651
> Mute This Topic: https://lists.openembedded.org/mt/115760534/6084445
> Group Owner: openembedded-devel+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [skandigraun@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
Ankur Tyagi Oct. 14, 2025, 9:19 p.m. UTC | #2 
On Wed, Oct 15, 2025 at 10:13 AM Gyorgy Sarvari <skandigraun@gmail.com> wrote:
>
> On 10/14/25 22:54, Ankur Tyagi via lists.openembedded.org wrote:
> > Bugfixes including CVE-2023-51257
> > https://github.com/jasper-software/jasper/compare/version-4.1.1...version-4.1.2
> >
> > Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
> > ---
> >  .../recipes-graphics/jasper/jasper_4.1.1.bb   |  2 +-
> >  .../recipes-graphics/jasper/jasper_4.1.2.bb   | 35 +++++++++++++++++++
>
> It looks like the original recipe (v4.1.1) wasn't deleted

Thanks, please drop this patch from the series and I'll send another
one fixing it.
>
> >  2 files changed, 36 insertions(+), 1 deletion(-)
> >  create mode 100644 meta-oe/recipes-graphics/jasper/jasper_4.1.2.bb
> >
> > diff --git a/meta-oe/recipes-graphics/jasper/jasper_4.1.1.bb b/meta-oe/recipes-graphics/jasper/jasper_4.1.1.bb
> > index 5281980ecb..d6d5b5de32 100644
> > --- a/meta-oe/recipes-graphics/jasper/jasper_4.1.1.bb
> > +++ b/meta-oe/recipes-graphics/jasper/jasper_4.1.1.bb
> > @@ -4,7 +4,7 @@ LICENSE = "MIT"
> >  LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a80440d1d8f17d041c71c7271d6e06eb"
> >
> >  SRC_URI = "git://github.com/jasper-software/jasper.git;protocol=https;branch=master"
> > -SRCREV = "917f7708b755d8434f70618108c1a76f1b6a0a82"
> > +SRCREV = "ff633699cb785967a2cb0084d89d56e53c46e416"
> >
> >  CVE_STATUS[CVE-2015-8751] = "fixed-version: The CPE in the NVD database doesn't reflect correctly the vulnerable versions."
> >
> > diff --git a/meta-oe/recipes-graphics/jasper/jasper_4.1.2.bb b/meta-oe/recipes-graphics/jasper/jasper_4.1.2.bb
> > new file mode 100644
> > index 0000000000..d4dae1f22a
> > --- /dev/null
> > +++ b/meta-oe/recipes-graphics/jasper/jasper_4.1.2.bb
> > @@ -0,0 +1,35 @@
> > +SUMMARY = "Jpeg 2000 implementation"
> > +HOMEPAGE = "https://jasper-software.github.io/jasper/"
> > +LICENSE = "MIT"
> > +LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a80440d1d8f17d041c71c7271d6e06eb"
> > +
> > +SRC_URI = "git://github.com/jasper-software/jasper.git;protocol=https;branch=master"
> > +SRCREV = "ff633699cb785967a2cb0084d89d56e53c46e416"
> > +
> > +CVE_STATUS[CVE-2015-8751] = "fixed-version: The CPE in the NVD database doesn't reflect correctly the vulnerable versions."
> > +CVE_STATUS[CVE-2023-51257] = "fixed-version: patch is already included in sources"
> > +
> > +S = "${WORKDIR}/git"
> > +
> > +inherit cmake multilib_header
> > +
> > +do_configure:prepend() {
> > +     JAS_STDC_VERSION="$(echo __STDC_VERSION__ | ${CPP} -E -P -)"
> > +}
> > +
> > +EXTRA_OECMAKE:append = " -DJAS_STDC_VERSION=${JAS_STDC_VERSION}"
> > +
> > +PACKAGECONFIG ??= "${@bb.utils.contains('DISTRO_FEATURES', 'opengl x11', 'opengl', '', d)} \
> > +                jpeg"
> > +
> > +PACKAGECONFIG[jpeg] = "-DJAS_ENABLE_LIBJPEG=ON,-DJAS_ENABLE_LIBJPEG=OFF,jpeg,"
> > +PACKAGECONFIG[opengl] = "-DJAS_ENABLE_OPENGL=ON,-DJAS_ENABLE_OPENGL=OFF,freeglut,"
> > +
> > +do_install:append() {
> > +    chrpath -d ${D}${bindir}/jasper
> > +    chrpath -d ${D}${bindir}/imginfo
> > +    chrpath -d ${D}${bindir}/imgcmp
> > +    chrpath -d ${D}${libdir}/libjasper.so.*
> > +    oe_multilib_header jasper/jas_config.h
> > +}
> > +
> >
> > -=-=-=-=-=-=-=-=-=-=-=-
> > Links: You receive all messages sent to this group.
> > View/Reply Online (#120651): https://lists.openembedded.org/g/openembedded-devel/message/120651
> > Mute This Topic: https://lists.openembedded.org/mt/115760534/6084445
> > Group Owner: openembedded-devel+owner@lists.openembedded.org
> > Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [skandigraun@gmail.com]
> > -=-=-=-=-=-=-=-=-=-=-=-
> >
>
diff mbox series

Patch

diff --git a/meta-oe/recipes-graphics/jasper/jasper_4.1.1.bb b/meta-oe/recipes-graphics/jasper/jasper_4.1.1.bb
index 5281980ecb..d6d5b5de32 100644
--- a/meta-oe/recipes-graphics/jasper/jasper_4.1.1.bb
+++ b/meta-oe/recipes-graphics/jasper/jasper_4.1.1.bb
@@ -4,7 +4,7 @@  LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a80440d1d8f17d041c71c7271d6e06eb"
 
 SRC_URI = "git://github.com/jasper-software/jasper.git;protocol=https;branch=master"
-SRCREV = "917f7708b755d8434f70618108c1a76f1b6a0a82"
+SRCREV = "ff633699cb785967a2cb0084d89d56e53c46e416"
 
 CVE_STATUS[CVE-2015-8751] = "fixed-version: The CPE in the NVD database doesn't reflect correctly the vulnerable versions."
 
diff --git a/meta-oe/recipes-graphics/jasper/jasper_4.1.2.bb b/meta-oe/recipes-graphics/jasper/jasper_4.1.2.bb
new file mode 100644
index 0000000000..d4dae1f22a
--- /dev/null
+++ b/meta-oe/recipes-graphics/jasper/jasper_4.1.2.bb
@@ -0,0 +1,35 @@ 
+SUMMARY = "Jpeg 2000 implementation"
+HOMEPAGE = "https://jasper-software.github.io/jasper/"
+LICENSE = "MIT"
+LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a80440d1d8f17d041c71c7271d6e06eb"
+
+SRC_URI = "git://github.com/jasper-software/jasper.git;protocol=https;branch=master"
+SRCREV = "ff633699cb785967a2cb0084d89d56e53c46e416"
+
+CVE_STATUS[CVE-2015-8751] = "fixed-version: The CPE in the NVD database doesn't reflect correctly the vulnerable versions."
+CVE_STATUS[CVE-2023-51257] = "fixed-version: patch is already included in sources"
+
+S = "${WORKDIR}/git"
+
+inherit cmake multilib_header
+
+do_configure:prepend() {
+	JAS_STDC_VERSION="$(echo __STDC_VERSION__ | ${CPP} -E -P -)"
+}
+
+EXTRA_OECMAKE:append = " -DJAS_STDC_VERSION=${JAS_STDC_VERSION}"
+
+PACKAGECONFIG ??= "${@bb.utils.contains('DISTRO_FEATURES', 'opengl x11', 'opengl', '', d)} \
+		   jpeg"
+
+PACKAGECONFIG[jpeg] = "-DJAS_ENABLE_LIBJPEG=ON,-DJAS_ENABLE_LIBJPEG=OFF,jpeg,"
+PACKAGECONFIG[opengl] = "-DJAS_ENABLE_OPENGL=ON,-DJAS_ENABLE_OPENGL=OFF,freeglut,"
+
+do_install:append() {
+    chrpath -d ${D}${bindir}/jasper
+    chrpath -d ${D}${bindir}/imginfo
+    chrpath -d ${D}${bindir}/imgcmp
+    chrpath -d ${D}${libdir}/libjasper.so.*
+    oe_multilib_header jasper/jas_config.h
+}
+