tree 673d49e9da37766684e240052d1469ac2c3532c8
parent d3343d3f7a6cea5c7261a79ece6cbf01ceaa41de
author Heiko Stuebner <heiko.stuebner@theobroma-systems.com> 1605270515 +0100
committer Peter Korsgaard <peter@korsgaard.com> 1605645553 +0100

package/jpeg-turbo: security bump to version 2.0.5

Fixes the following security issue:

- CVE-2020-13790: ibjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based
  buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input
  file

For more details, see the release notes:
https://github.com/libjpeg-turbo/libjpeg-turbo/releases/tag/2.0.5

Signed-off-by: Heiko Stuebner <heiko.stuebner@theobroma-systems.com>
[Peter: mark as security bump / extend commit message]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>