Raphaël Mélotte 9c0891190a package/jbig2dec: add upstream security fix for CVE-2023-46361 ...

Fixes the following security issue:
CVE-2023-46361: Artifex Software jbig2dec v0.20 was discovered to
contain a SEGV vulnerability via jbig2_error at /jbig2dec/jbig2.c.

https://www.cve.org/CVERecord?id=CVE-2023-46361

Note that jbig2dec version 0.19 (used in Buildroot 2024.02.11) is not
officially listed as affected, but it actually has the same bug.

Also note that this CVE is about a crash in the CLI tool only.

Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
[Julien: add JBIG2DEC_IGNORE_CVES]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 63c2dd2d40)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2025-03-13 21:08:56 +01:00

..

0001-Bug-705041-jbig2dec-Avoid-uninitialized-allocator-in.patch

…

Config.in

…

jbig2dec.hash

…

jbig2dec.mk

…