buildroot/package/lcms2, branch 2019.02-op-build

lcms2: add upstream security fix for CVE-2018-16435

2018-09-05T21:01:21+00:00

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile. For more details, see: https://github.com/mm2/Little-CMS/issues/171 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16435 The upstream fix unfortunately includes a number of unrelated changes, but thse files are not used when building for Linux. Signed-off-by: Peter Korsgaard

lcms2: bump to version 2.9

2018-05-06T07:05:33+00:00

- Remove two patches (already in version) - Add hash for license file Signed-off-by: Fabrice Fontaine Signed-off-by: Peter Korsgaard

package: declare target variant before host variant

2018-04-30T15:43:46+00:00

Our package infrastructure uses inheritance of a number of values from the target package to the host package, which assumes the target package is defined before the host package. In addition, future changes are going to make this requirement even more important. Therefore, let's fix the android-tools, gauche, lcms2, linux-syscall-support and pngquant packages, so that they declare their target variant before their host variant, like all other packages in Buildroot. Signed-off-by: Thomas Petazzoni Signed-off-by: "Yann E. MORIN" Signed-off-by: Thomas Petazzoni

package/l*: fix wrapping of Config.in help text

2017-07-31T17:09:59+00:00

The check-package script when ran gives warnings on text wrapping on all of these Config files. This patch cleans up all warnings related to the text wrapping for the Config files starting with the letter l in the package directory. The appropriate indentation is: <2 spaces><62 chars> See http://nightly.buildroot.org/#writing-rules-config-in for more information. Signed-off-by: Adam Duskett Signed-off-by: Thomas Petazzoni

package/lcms2: add support for host variant

2017-03-20T22:34:01+00:00

Needed for upcoming ghostscript package. Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

lcms2: add upstream security fix for CVE-2016-10165

2017-01-30T20:16:05+00:00

An out-of-bounds read in cmstypes.c in Type_MLU_Read function was found, leading to heap memory leak triggered by crafted ICC profile. https://bugzilla.redhat.com/show_bug.cgi?id=1367357 Add upstream patch to fix it. Signed-off-by: Peter Korsgaard

package/lcms2: remove empty variable LCMS2_CONF_OPTS

2017-01-25T10:07:02+00:00

Introduced 2013 with the commit adding this package https://git.buildroot.net/buildroot/commit/package/lcms2?id=901282aa6e330c5e61ab25a83ba68e443cb3aec2 without any notice why it is needed. The package compiles fine without it so let's remove it. Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

Merge branch 'next'

2016-12-01T21:29:56+00:00

Signed-off-by: Peter Korsgaard

lcms2: bump version to 2.8

2016-11-14T20:36:11+00:00

For ChangeLog see [1]. [1] https://github.com/mm2/Little-CMS/blob/master/ChangeLog Signed-off-by: Peter Seiderer Signed-off-by: Thomas Petazzoni

lcms2: fix lcms2.pc.in thread library dependency (for static linking)

2016-11-13T13:29:20+00:00

Signed-off-by: Peter Seiderer Signed-off-by: Thomas Petazzoni