kumquat-buildroot/package/jpeg-turbo/jpeg-turbo.hash

# From https://sourceforge.net/projects/libjpeg-turbo/files/2.0.5/
sha1  9d4c565d402b2f5661be78d76098073ec7e30f10  libjpeg-turbo-2.0.5.tar.gz
md5  3a7dc293918775fc933f81e2bce36464  libjpeg-turbo-2.0.5.tar.gz
# Locally computed
sha256  16f8f6f2715b3a38ab562a84357c793dd56ae9899ce130563c72cd93d8357b5d  libjpeg-turbo-2.0.5.tar.gz
sha256  0b7a24c3906d26dfbe24e96e9415549b387c3227140dc6b7ab2fb924254e37a1  LICENSE.md
sha256  82fece2bff2669c476495f0fe70096b154e8bc5b40916a64e99836d9a01c3110  README.ijg
package/jpeg-turbo: security bump to version 2.0.5 Fixes the following security issue: - CVE-2020-13790: ibjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file For more details, see the release notes: https://github.com/libjpeg-turbo/libjpeg-turbo/releases/tag/2.0.5 Signed-off-by: Heiko Stuebner <heiko.stuebner@theobroma-systems.com> [Peter: mark as security bump / extend commit message] Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2020-11-13 13:28:35 +01:00			`# From https://sourceforge.net/projects/libjpeg-turbo/files/2.0.5/`
package/jpeg-turbo: fix license hash Commit 105d61c85062b18bc9555011f909c8c8a5a33277 forgot to update hash of LICENSE.md (update in year: https://github.com/libjpeg-turbo/libjpeg-turbo/commit/00607ec260efa4cfe10f9b36d6e3d3590ae92d79) While at it, also update indentation in hash file (two spaces) Fixes: - http://autobuild.buildroot.org/results/66fb5c0171af73d4c1c93241b285fac8f8f494f7 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2020-11-18 08:00:06 +01:00			`sha1 9d4c565d402b2f5661be78d76098073ec7e30f10 libjpeg-turbo-2.0.5.tar.gz`
			`md5 3a7dc293918775fc933f81e2bce36464 libjpeg-turbo-2.0.5.tar.gz`
jpeg-turbo: bump version from 1.4.0 to 1.4.1 Signed-off-by: Jonathan Ben Avraham <yba@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> 2015-08-05 06:17:20 +02:00			`# Locally computed`
package/jpeg-turbo: fix license hash Commit 105d61c85062b18bc9555011f909c8c8a5a33277 forgot to update hash of LICENSE.md (update in year: https://github.com/libjpeg-turbo/libjpeg-turbo/commit/00607ec260efa4cfe10f9b36d6e3d3590ae92d79) While at it, also update indentation in hash file (two spaces) Fixes: - http://autobuild.buildroot.org/results/66fb5c0171af73d4c1c93241b285fac8f8f494f7 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> 2020-11-18 08:00:06 +01:00			`sha256 16f8f6f2715b3a38ab562a84357c793dd56ae9899ce130563c72cd93d8357b5d libjpeg-turbo-2.0.5.tar.gz`
			`sha256 0b7a24c3906d26dfbe24e96e9415549b387c3227140dc6b7ab2fb924254e37a1 LICENSE.md`
			`sha256 82fece2bff2669c476495f0fe70096b154e8bc5b40916a64e99836d9a01c3110 README.ijg`