diff --git a/.gitignore b/.gitignore index 01a77dd..bc4ac36 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/jbig2dec-0.16.tar.gz +jbig2dec-0.20.tar.gz diff --git a/.jbig2dec.metadata b/.jbig2dec.metadata deleted file mode 100644 index 5532383..0000000 --- a/.jbig2dec.metadata +++ /dev/null @@ -1 +0,0 @@ -38c62210d92102952b18400b15eb4e727a755bfd SOURCES/jbig2dec-0.16.tar.gz diff --git a/SOURCES/CVE-2020-12268.patch b/SOURCES/CVE-2020-12268.patch deleted file mode 100644 index a77ffa4..0000000 --- a/SOURCES/CVE-2020-12268.patch +++ /dev/null @@ -1,48 +0,0 @@ -From 24ddcfc7e37c0ce3b0f1852042ee431a53fd774c Mon Sep 17 00:00:00 2001 -From: Robin Watts -Date: Mon, 27 Jan 2020 10:12:24 -0800 -Subject: [PATCH] Fix OSS-Fuzz issue 20332: buffer overflow in - jbig2_image_compose. - -With extreme values of x/y/w/h we can get overflow. Test for this -and exit safely. - -Thanks for OSS-Fuzz for reporting. ---- - jbig2_image.c | 13 +++++++++++++ - 1 file changed, 13 insertions(+) - -diff --git a/jbig2_image.c b/jbig2_image.c -index 22e21ef..f036cef 100644 ---- a/jbig2_image.c -+++ b/jbig2_image.c -@@ -34,6 +34,10 @@ - #define INT32_MAX 0x7fffffff - #endif - -+#if !defined (UINT32_MAX) -+#define UINT32_MAX 0xffffffffu -+#endif -+ - /* allocate a Jbig2Image structure and its associated bitmap */ - Jbig2Image * - jbig2_image_new(Jbig2Ctx *ctx, uint32_t width, uint32_t height) -@@ -255,6 +259,15 @@ jbig2_image_compose(Jbig2Ctx *ctx, Jbig2Image *dst, Jbig2Image *src, int x, int - uint8_t *d, *dd; - uint8_t mask, rightmask; - -+ if ((UINT32_MAX - src->width < (x > 0 ? x : -x)) || -+ (UINT32_MAX - src->height < (y > 0 ? y : -y))) -+ { -+#ifdef JBIG2_DEBUG -+ jbig2_error(ctx, JBIG2_SEVERITY_DEBUG, -1, "overflow in compose_image"); -+#endif -+ return 0; -+ } -+ - if (src == NULL) - return 0; - --- -2.26.2 - diff --git a/SPECS/jbig2dec.spec b/SPECS/jbig2dec.spec deleted file mode 100644 index e80e992..0000000 --- a/SPECS/jbig2dec.spec +++ /dev/null @@ -1,164 +0,0 @@ -Name: jbig2dec -Version: 0.16 -Release: 1%{?dist} -Summary: A decoder implementation of the JBIG2 image compression format - -Group: System Environment/Libraries -License: GPLv2 -URL: http://jbig2dec.sourceforge.net/ -Source0: https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs927/%{name}-%{version}.tar.gz -BuildRequires: libtool -Requires: %{name}-libs = %{version}-%{release} - -Patch0: CVE-2020-12268.patch - -%description -jbig2dec is a decoder implementation of the JBIG2 image compression format. -JBIG2 is designed for lossy or lossless encoding of 'bilevel' (1-bit -monochrome) images at moderately high resolution, and in particular scanned -paper documents. In this domain it is very efficient, offering compression -ratios on the order of 100:1. - -%package libs -Summary: A decoder implementation of the JBIG2 image compression format -Group: System Environment/Libraries - -%description libs -jbig2dec is a decoder implementation of the JBIG2 image compression format. -JBIG2 is designed for lossy or lossless encoding of 'bilevel' (1-bit -monochrome) images at moderately high resolution, and in particular scanned -paper documents. In this domain it is very efficient, offering compression -ratios on the order of 100:1. - -This package provides the shared jbig2dec library. - -%package devel -Summary: Static library and header files for development with jbig2dec -Group: Development/Libraries -Requires: %{name}-libs = %{version}-%{release} - -%description devel -jbig2dec is a decoder implementation of the JBIG2 image compression format. -JBIG2 is designed for lossy or lossless encoding of 'bilevel' (1-bit -monochrome) images at moderately high resolution, and in particular scanned -paper documents. In this domain it is very efficient, offering compression -ratios on the order of 100:1. - -This package is only needed if you plan to develop or compile applications -which requires the jbig2dec library. - - -%prep -%setup -q -%patch0 -p1 - - -%build -autoreconf -i -%configure -make %{?_smp_mflags} - - -%install -make DESTDIR=%{buildroot} install -rm -f %{buildroot}%{_libdir}/*.a -rm -f %{buildroot}%{_libdir}/*.la - -%post libs -p /sbin/ldconfig - -%postun libs -p /sbin/ldconfig - - -%files -%doc CHANGES COPYING LICENSE README -%{_bindir}/jbig2dec -%{_mandir}/man?/jbig2dec.1.gz - -%files devel -%doc CHANGES COPYING LICENSE README -%{_includedir}/jbig2.h -%{_libdir}/libjbig2dec.so - -%files libs -%doc CHANGES COPYING LICENSE README -%{_libdir}/libjbig2dec.so.0 -%{_libdir}/libjbig2dec.so.0.0.0 - - - -%changelog -* Thu Oct 08 2020 Nikola Forró - 0.16-1 -- Update to 0.16 - resolves: #1886011 - -* Sun Jun 28 2020 Nikola Forró - 0.14-4 -- Add explicit package version requirement on jbig2dec-libs to jbig2dec - related: #1851058 - -* Fri Jun 26 2020 Nikola Forró - 0.14-3 -- Fix CVE-2020-12268 - resolves: #1851058 - -* Wed Feb 07 2018 Fedora Release Engineering - 0.14-2 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - -* Sat Nov 11 2017 Michael J Gruber - 0.14-1 -- update to 0.14 (bugfix release) - -* Wed Aug 02 2017 Fedora Release Engineering - 0.13-6 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - -* Wed Jul 26 2017 Fedora Release Engineering - 0.13-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - -* Thu May 11 2017 Pavel Zhukov - 0.13.4 -- Add fix for CVE-2017-7976 (#1443898) - -* Wed May 3 2017 Pavel Zhukov - 0.13-3 -- Prevent segserv due to int overflow (#1443898) - -* Tue Mar 07 2017 Pavel Zhukov - 0.13-1 -- New release 0.13 - -* Fri Feb 10 2017 Fedora Release Engineering - 0.12-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - -* Thu Feb 04 2016 Fedora Release Engineering - 0.12-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - -* Fri Nov 27 2015 Pavel Zhukov - 0.12-2 -- New release (#1208076) -- Require autotools - -* Wed Jun 17 2015 Fedora Release Engineering - 0.11-11 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - -* Sat Aug 16 2014 Fedora Release Engineering - 0.11-10 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - -* Sat Jun 07 2014 Fedora Release Engineering - 0.11-9 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - -* Sat Aug 03 2013 Fedora Release Engineering - 0.11-8 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - -* Sat Mar 23 2013 Pavel Zhukov - 0.11-7 -- Add ARM64 patch - -* Thu Feb 14 2013 Fedora Release Engineering - 0.11-6 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - -* Thu Jul 19 2012 Fedora Release Engineering - 0.11-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - -* Fri Jan 13 2012 Fedora Release Engineering - 0.11-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - -* Wed Feb 09 2011 Fedora Release Engineering - 0.11-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - -* Wed Jan 12 2011 Pavel Zhukov - 0.11-2.fc14 -- Fixed some spec errors - -* Tue Jan 11 2011 Pavel Zhukov - 0.11-1.fc14 -- Initial package diff --git a/jbig2dec.spec b/jbig2dec.spec new file mode 100644 index 0000000..1db28ee --- /dev/null +++ b/jbig2dec.spec @@ -0,0 +1,248 @@ +## START: Set by rpmautospec +## (rpmautospec version 0.6.5) +## RPMAUTOSPEC: autorelease, autochangelog +%define autorelease(e:s:pb:n) %{?-p:0.}%{lua: + release_number = 7; + base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}")); + print(release_number + base_release_number - 1); +}%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}} +## END: Set by rpmautospec + +Name: jbig2dec +Version: 0.20 +Release: %autorelease +Summary: A decoder implementation of the JBIG2 image compression format +License: AGPL-3.0-or-later +URL: https://jbig2dec.com +Source0: https://github.com/ArtifexSoftware/jbig2dec/releases/download/%{version}/%{name}-%{version}.tar.gz +Requires: %{name}-libs = %{version}-%{release} +BuildRequires: libtool +BuildRequires: libpng-devel +BuildRequires: make + +%description +jbig2dec is a decoder implementation of the JBIG2 image compression format. +JBIG2 is designed for lossy or lossless encoding of 'bilevel' (1-bit +monochrome) images at moderately high resolution, and in particular scanned +paper documents. In this domain it is very efficient, offering compression +ratios on the order of 100:1. + +%package libs +Summary: A decoder implementation of the JBIG2 image compression format + +%description libs +jbig2dec is a decoder implementation of the JBIG2 image compression format. +JBIG2 is designed for lossy or lossless encoding of 'bilevel' (1-bit +monochrome) images at moderately high resolution, and in particular scanned +paper documents. In this domain it is very efficient, offering compression +ratios on the order of 100:1. + +This package provides the shared jbig2dec library. + +%package devel +Summary: Static library and header files for development with jbig2dec +Requires: %{name}-libs = %{version}-%{release} + +%description devel +jbig2dec is a decoder implementation of the JBIG2 image compression format. +JBIG2 is designed for lossy or lossless encoding of 'bilevel' (1-bit +monochrome) images at moderately high resolution, and in particular scanned +paper documents. In this domain it is very efficient, offering compression +ratios on the order of 100:1. + +This package is only needed if you plan to develop or compile applications +which requires the jbig2dec library. + + +%prep +%autosetup + + +%build +autoreconf -fi +%configure --disable-static +%make_build + + +%install +%make_install +rm -f %{buildroot}%{_libdir}/*.la + +%ldconfig_scriptlets libs + + +%files +%doc CHANGES COPYING LICENSE README +%{_bindir}/jbig2dec +%{_mandir}/man?/jbig2dec.1* + +%files devel +%doc CHANGES COPYING LICENSE README +%{_includedir}/jbig2.h +%{_libdir}/libjbig2dec.so +%{_libdir}/pkgconfig/%{name}.pc + +%files libs +%doc CHANGES COPYING LICENSE README +%{_libdir}/libjbig2dec.so.0 +%{_libdir}/libjbig2dec.so.0.0.0 + + + +%changelog +## START: Generated by rpmautospec +* Tue Oct 29 2024 Troy Dawson - 0.20-7 +- Bump release for October 2024 mass rebuild: + +* Wed Oct 16 2024 Michal Hlavinka - 0.20-6 +- add gating configuration + +* Mon Jun 24 2024 Troy Dawson - 0.20-5 +- Bump release for June 2024 mass rebuild + +* Wed Jan 24 2024 Fedora Release Engineering - 0.20-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + +* Sat Jan 20 2024 Fedora Release Engineering - 0.20-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + +* Wed Sep 13 2023 Michael J Gruber - 0.20-1 +- rebase to 0.20 (rhbz#2238815) + +* Thu Jul 20 2023 Fedora Release Engineering - 0.19-10 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild + +* Sun Feb 12 2023 Michael J Gruber - 0.19-9 +- SPDX migration + +* Thu Jan 19 2023 Fedora Release Engineering - 0.19-8 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild + +* Thu Jul 21 2022 Fedora Release Engineering - 0.19-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild + +* Thu Jan 20 2022 Fedora Release Engineering - 0.19-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild + +* Thu Jul 22 2021 Fedora Release Engineering - 0.19-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild + +* Tue Jan 26 2021 Fedora Release Engineering - 0.19-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + +* Sun Dec 13 2020 Orion Poplawski - 0.19-3 +- Use autoreconf -f to remove rpath +- Use --disable-static to disable static builds +- Use current make macros + +* Fri Sep 18 2020 Michael J Gruber - 0.19-2 +- remove ABI patch (and coordinate builds) + +* Thu Sep 17 2020 Anna Khaitovich - 0.19-1 +- Rebase to 0.19 + +* Tue Jul 28 2020 Fedora Release Engineering - 0.18-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Wed Jul 08 2020 Michael J Gruber - 0.18-3 +- build with libpng + +* Wed Jul 08 2020 Nikola Forró - 0.18-2 +- fix License + +* Mon May 11 2020 Michael J Gruber - 0.18-1 +- rebase to 0.18 (bz #1818706) + +* Wed Jan 29 2020 Fedora Release Engineering - 0.17-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + +* Sat Dec 14 2019 Michael J Gruber - 0.17-3 +- require exact libs version +- clean up white space + +* Sat Nov 09 2019 Michael J Gruber - 0.17-2 +- restore ABI-compatibilty (#1770160) + +* Thu Nov 07 2019 Michael J Gruber - 0.17-1 +- bugfix release (bz #1761919) + +* Thu Aug 15 2019 Michael J Gruber - 0.16-1 +- rebase to 0.16 (bz #1741605) + +* Thu Jul 25 2019 Fedora Release Engineering - 0.14-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Fri Feb 01 2019 Fedora Release Engineering - 0.14-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + +* Tue Sep 18 2018 Owen Taylor - 0.14-4 +- Handle both compressed and uncompressed man pages + +* Fri Jul 13 2018 Fedora Release Engineering - 0.14-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Wed Feb 07 2018 Fedora Release Engineering - 0.14-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Sat Nov 11 2017 Michael J Gruber - 0.14-1 +- update to 0.14 (bugfix release) + +* Wed Aug 02 2017 Fedora Release Engineering - 0.13-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild + +* Wed Jul 26 2017 Fedora Release Engineering - 0.13-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Thu May 11 2017 Pavel Zhukov - 0.13.4 +- Add fix for CVE-2017-7976 (#1443898) + +* Wed May 03 2017 Pavel Zhukov - 0.13-3 +- Prevent segserv due to int overflow (#1443898) + +* Tue Mar 07 2017 Pavel Zhukov - 0.13-1 +- New release 0.13 + +* Fri Feb 10 2017 Fedora Release Engineering - 0.12-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Thu Feb 04 2016 Fedora Release Engineering - 0.12-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Fri Nov 27 2015 Pavel Zhukov - 0.12-2 +- New release (#1208076) +- Require autotools + +* Wed Jun 17 2015 Fedora Release Engineering - 0.11-11 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Sat Aug 16 2014 Fedora Release Engineering - 0.11-10 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + +* Sat Jun 07 2014 Fedora Release Engineering - 0.11-9 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Sat Aug 03 2013 Fedora Release Engineering - 0.11-8 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild + +* Sat Mar 23 2013 Pavel Zhukov - 0.11-7 +- Add ARM64 patch + +* Thu Feb 14 2013 Fedora Release Engineering - 0.11-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild + +* Thu Jul 19 2012 Fedora Release Engineering - 0.11-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Fri Jan 13 2012 Fedora Release Engineering - 0.11-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Wed Feb 09 2011 Fedora Release Engineering - 0.11-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + +* Wed Jan 12 2011 Pavel Zhukov - 0.11-2.fc14 +- Fixed some spec errors + +* Tue Jan 11 2011 Pavel Zhukov - 0.11-1.fc14 +- Initial package + +## END: Generated by rpmautospec diff --git a/sources b/sources new file mode 100644 index 0000000..412364f --- /dev/null +++ b/sources @@ -0,0 +1 @@ +SHA512 (jbig2dec-0.20.tar.gz) = 74d40b4d5b21dcb2b6ed15de84e9ef292774783547d0a36c7185740f3fe34341665b4aa756369d27d158404f15f36f3edd2fd1a8187a196d08c9b06ab3d04101