[Buildroot] [PATCH] package/jpeg-turbo: bump to version 2.0.5

[Buildroot] [PATCH] package/jpeg-turbo: bump to version 2.0.5

[Heiko Stuebner]

From: Heiko Stuebner <heiko.stuebner@theobroma-systems.com>

This also includes the fix for CVE-2020-13790 .

Signed-off-by: Heiko Stuebner <heiko.stuebner@theobroma-systems.com>
---
 package/jpeg-turbo/jpeg-turbo.hash | 8 ++++----
 package/jpeg-turbo/jpeg-turbo.mk   | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package/jpeg-turbo/jpeg-turbo.hash b/package/jpeg-turbo/jpeg-turbo.hash
index 874f04fc82..abf129bd93 100644
--- a/package/jpeg-turbo/jpeg-turbo.hash
+++ b/package/jpeg-turbo/jpeg-turbo.hash
@@ -1,7 +1,7 @@
-# From https://sourceforge.net/projects/libjpeg-turbo/files/2.0.4/
-sha1 163d8f96d0999526a117de0388624241b54dcd67  libjpeg-turbo-2.0.4.tar.gz
-md5  d01d9e0c28c27bc0de9f4e2e8ff49855 libjpeg-turbo-2.0.4.tar.gz
+# From https://sourceforge.net/projects/libjpeg-turbo/files/2.0.5/
+sha1 9d4c565d402b2f5661be78d76098073ec7e30f10  libjpeg-turbo-2.0.5.tar.gz
+md5  3a7dc293918775fc933f81e2bce36464 libjpeg-turbo-2.0.5.tar.gz
 # Locally computed
-sha256 33dd8547efd5543639e890efbf2ef52d5a21df81faf41bb940657af916a23406  libjpeg-turbo-2.0.4.tar.gz
+sha256 16f8f6f2715b3a38ab562a84357c793dd56ae9899ce130563c72cd93d8357b5d  libjpeg-turbo-2.0.5.tar.gz
 sha256 69e570a251515ced17d4492256d57c89db77ed949652f88a44c80c1ca9607920  LICENSE.md
 sha256 82fece2bff2669c476495f0fe70096b154e8bc5b40916a64e99836d9a01c3110  README.ijg
diff --git a/package/jpeg-turbo/jpeg-turbo.mk b/package/jpeg-turbo/jpeg-turbo.mk
index 65debb2510..ddb22bc20b 100644
--- a/package/jpeg-turbo/jpeg-turbo.mk
+++ b/package/jpeg-turbo/jpeg-turbo.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-JPEG_TURBO_VERSION = 2.0.4
+JPEG_TURBO_VERSION = 2.0.5
 JPEG_TURBO_SOURCE = libjpeg-turbo-$(JPEG_TURBO_VERSION).tar.gz
 JPEG_TURBO_SITE = https://downloads.sourceforge.net/project/libjpeg-turbo/$(JPEG_TURBO_VERSION)
 JPEG_TURBO_LICENSE = IJG (libjpeg), BSD-3-Clause (TurboJPEG), Zlib (SIMD)
-- 
2.28.0

[Buildroot] [PATCH] package/jpeg-turbo: bump to version 2.0.5

[Peter Korsgaard]

>>>>> "Heiko" == Heiko Stuebner <heiko@sntech.de> writes:

 > From: Heiko Stuebner <heiko.stuebner@theobroma-systems.com>
 > This also includes the fix for CVE-2020-13790 .

 > Signed-off-by: Heiko Stuebner <heiko.stuebner@theobroma-systems.com>

Committed after extending the commit message / marking it as a security bump, thanks.

-- 
Bye, Peter Korsgaard

[Buildroot] [PATCH] package/jpeg-turbo: bump to version 2.0.5

[Peter Korsgaard]

>>>>> "Heiko" == Heiko Stuebner <heiko@sntech.de> writes:

 > From: Heiko Stuebner <heiko.stuebner@theobroma-systems.com>
 > This also includes the fix for CVE-2020-13790 .

 > Signed-off-by: Heiko Stuebner <heiko.stuebner@theobroma-systems.com>

BTW: Notice that 2.0.6 has now been released as well.

-- 
Bye, Peter Korsgaard

[Buildroot] [PATCH] package/jpeg-turbo: bump to version 2.0.5

[Peter Korsgaard]

>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes:

>>>>> "Heiko" == Heiko Stuebner <heiko@sntech.de> writes:
 >> From: Heiko Stuebner <heiko.stuebner@theobroma-systems.com>
 >> This also includes the fix for CVE-2020-13790 .

 >> Signed-off-by: Heiko Stuebner <heiko.stuebner@theobroma-systems.com>

 > Committed after extending the commit message / marking it as a security bump, thanks.

Committed to 2020.02.x and 2020.08.x, thanks.

-- 
Bye, Peter Korsgaard