openjpeg, branch v2.3.1 Fork of openjpeg library for JPEG2000 encoding and decoding https://git.carlh.net/cgit/openjpeg/atom?h=v2.3.1 2019-04-02T12:45:15Z update token for appveyor auto release 2019-04-02T12:45:15Z Antonin Descampe antonin@gmail.com 2019-04-02T12:45:15Z urn:sha1:57096325457f96d8cd07bd3af04fe81d7a2ba788 update token for automatic release 2019-04-02T12:25:09Z Antonin Descampe antonin@gmail.com 2019-04-02T12:25:09Z urn:sha1:8b9a89bc2e61652d30bbc56673f8f03ef464430f Update for release 2.3.1 2019-04-02T10:08:52Z Antonin Descampe antonin@gmail.com 2019-04-02T10:08:52Z urn:sha1:d1d422c126cbc2a5435340bd85f4b52ff0477101 Update for release 2.3.1 2019-04-02T09:03:16Z Antonin Descampe info@openjpeg.org 2019-04-02T09:03:16Z urn:sha1:d3b0b8927acf2e050a6379320d36fc3bb3751fe3 update for release 2.3.1 2019-04-02T09:02:20Z Antonin Descampe info@openjpeg.org 2019-04-02T09:02:20Z urn:sha1:c7798bb0c636c89ab7f0bab4d89e7f0136e0e55a Update BUILD version for release 2.3.1 2019-04-02T09:00:58Z Antonin Descampe info@openjpeg.org 2019-04-02T09:00:58Z urn:sha1:8196ab531e79602fe3c947d09d3240c25c358731 Merge pull request #1188 from rouault/fix_abi_check 2019-03-29T11:25:39Z Even Rouault even.rouault@mines-paris.org 2019-03-29T11:25:39Z urn:sha1:69a7a312dccebc8b5f28f8a5e4a703cb8d447d44 abi-check.sh: fix broken download URL abi-check.sh: fix broken download URL 2019-03-29T10:53:23Z Even Rouault even.rouault@spatialys.com 2019-03-29T10:53:23Z urn:sha1:5151426d6e6f7f0e1ae6f050aaa7cec6bc4ffd08 Merge pull request #1187 from rouault/fix_ubsan_in_opj_t1_encode_cblks 2019-03-29T10:52:38Z Even Rouault even.rouault@mines-paris.org 2019-03-29T10:52:38Z urn:sha1:d6b8aed5612e6be6d3a4053867fbd2ae0cb7c8af opj_t1_encode_cblks: fix UBSAN signed integer overflow opj_t1_encode_cblks: fix UBSAN signed integer overflow 2019-03-29T10:17:39Z Even Rouault even.rouault@spatialys.com 2019-03-29T10:17:39Z urn:sha1:a1d32a596a94280178c44a55d7e7f1acd992ed5d Fixes #1053 / CVE-2018-5727 Note: I don't consider this issue to be a security vulnerability, in practice. At least with gcc or clang compilers on x86_64 which generate the same assembly code with or without that fix.