jasper: bump version to 1.900.31 (security)
authorVicente Olivert Riera <Vincent.Riera@imgtec.com>
Tue, 29 Nov 2016 11:23:03 +0000 (11:23 +0000)
committerPeter Korsgaard <peter@korsgaard.com>
Tue, 29 Nov 2016 21:36:00 +0000 (22:36 +0100)
Fixed CVEs:
 - CVE-2016-9387
 - CVE-2016-9388
 - CVE-2016-9389
 - CVE-2016-9390
 - CVE-2016-9391
 - CVE-2016-9392
 - CVE-2016-9393
 - CVE-2016-9394
 - CVE-2016-9395
 - CVE-2016-9396
 - CVE-2016-9397
 - CVE-2016-9398
 - CVE-2016-9399
 - CVE-2016-9557
 - CVE-2016-9560

Changes to jasper.mk:
 - Switched site method to GitHub. 1.900.31 is not released as a tarball
   in the official website.
 - Autoreconf necessary since there isn't any configure script. We need
   to generate it.

Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/jasper/jasper.hash
package/jasper/jasper.mk

index fdadbb283d1c521ca66fa545a6de7d88f64b0290..64ddfa4841a9995477c8c2ac3e953958d6a2193f 100644 (file)
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256 6c942ae79108cd6a359e5bc34ea03565bd33ac20f6814cb09c4f92298b6b1cb8        jasper-1.900.22.tar.gz
+sha256 0099084dce9fa0a318b48a5ed2a12ac7cff3324f3fd4459833e6fe2ff583fb2c  jasper-version-1.900.31.tar.gz
index bacb1a6cfebba43e0127335e11fc8fc4f6ac1af0..e8b8aaa9b58554c94a1054da5641bbd66185a550 100644 (file)
@@ -4,12 +4,16 @@
 #
 ################################################################################
 
-JASPER_VERSION = 1.900.22
-JASPER_SITE = http://www.ece.uvic.ca/~frodo/jasper/software
+JASPER_VERSION = version-1.900.31
+JASPER_SITE = $(call github,mdadams,jasper,$(JASPER_VERSION))
 JASPER_INSTALL_STAGING = YES
 JASPER_DEPENDENCIES = jpeg
 JASPER_LICENSE = JasPer License Version 2.0
 JASPER_LICENSE_FILES = LICENSE
+
+# No configure script included. We need to generate it.
+JASPER_AUTORECONF = YES
+
 JASPER_CONF_OPTS = --disable-strict
 
 # Xtensa gcc is unable to generate correct code with -O0 enabled by