ELBA-2024-22102

ELBA-2024-22102 - stb Bug Fix update

Type:	BUG
Impact:	NA
Release Date:	2024-05-11

Description

[0-0.45.20240213gitae721c5]
- Patch for GHSL-2023-171/CVE-2023-45681/CVE-2023-47212

[0-0.44.20240213gitae721c5]
- Fix a description to use American English orthography

[0-0.42.20240213gitae721c5]
- Fix compile error on riscv64

[0-0.41.20240213gitae721c5]
- Update to 0^20240213gitae721c5
- stb_image_resize2-devel is updated to 2.06

[0-0.40.20240208gitb7cf124]
- Update to 0^20240208gitb7cf124
- stb_image-devel is updated to 2.29
- stb_image_resize2-devel is updated to 2.05

[0-0.39.20231011gitbeebb24]
- stb_vorbis: fix GHSL-2023-165 / fix CVE-2023-45675

[0-0.38.20231011gitbeebb24]
- stb_image: fix GHSL-2023-151 / fix CVE-2023-45667

[0-0.37.20231011gitbeebb24]
- stb_image: fix GHSL-2023-150 / fix CVE-2023-45666

[0-0.36.20231011gitbeebb24]
- Document another bug, PR, and name (GHSL-2023-149) for CVE-2023-43898

[0-0.35.20231011gitbeebb24]
- stb_image: fix GHSL-2023-148 / fix CVE-2023-45664

[0-0.34.20231011gitbeebb24]
- stb_image: fix GHSL-2023-147 / fix CVE-2023-45663

[0-0.33.20231011gitbeebb24]
- stb_image: fix GHSL-2023-146 / fix CVE-2023-45662

[0-0.32.20231011gitbeebb24]
- stb_image: fix GHSL-2023-145 / fix CVE-2023-45661

[0-0.31.20231011gitbeebb24]
- Document that 1454.patch fixes CVE-2023-43898

[0-0.30.20231011gitbeebb24]
- Backport a PR fixing undefined behavior in stb_image_resize2

[0-0.29.20231011gitbeebb24]
- Backport three PR's fixing undefined behavior in stb_image

[0-0.28.20231011gitbeebb24]
- Update to 0^beebb24git20231011 (minor C99 fixes)

[0-0.27.20231009gitc4bbb6e]
- Update to 0^20231009gitc4bbb6e
- A new stb_image_resize2 library is introduced
- Upstream has deprecated stb_image_resize, but we still package it

[0-0.24.20230129git5736b15]
- Fix null pointer dereference in stb_image

[0-0.23.20230129git5736b15]
- Don't pass unknown -D option to install

[0-0.22.20230129git5736b15]
- Reduce macro indirection in the spec file

[0-0.21.20230129git5736b15]
- Update to 5736b1 (version history and README updates)

[0-0.20.20230129git6199bf7]
- Update License to SPDX

[0-0.19.20230129git6199bf7]
- Update to 6199bf7 (stb_image 2.28)
- Security-related patches for stb_image have been merged upstream, and
there are other bugfixes.

[0-0.18.20220908git8b5f1f3]
- Patch in a candidate fix for ossfuzz issue 24232
- Improves handling of certain invalid PNGs by stb_image

[0-0.17.20220908git8b5f1f3]
- A few improved descriptions

[0-0.16.20220908git8b5f1f3]
- Improved summaries based on upstream's README.md

[0-0.15.20220908git8b5f1f3]
- Update to 8b5f1f3
- The stb_perlin-devel subpackage has been restored, as upstream believes
all relevant patents are now expired.

[0-0.14.20210910gitaf1a5bc]
- Reword spec file note on stb_include

[0-0.8.20211022gitaf1a5bc]
- Security fix for CVE-2022-28041

[0-0.7.20211022gitaf1a5bc]
- Security fix for CVE-2021-42715 and CVE-2021-42716

[0-0.6.20211022gitaf1a5bc]
- Update to af1a5bc: only issue templates are affected; packaged files should
be identical.

[0-0.5.20210908gitc0c9826]
- Reduce macro indirection in the spec file

[0-0.4.20210908gitc0c9826]
- Update to c0c9826 (fix RHBZ#2002436)
- Removed and obsoleted stb_perlin-devel due to possible patents
- Updated stb_truetype to 1.26
- Bug fixes in stb_image (no new version number)

[0-0.3.20210728git3a11740]
- Fix signature of dummy realloc() for STB_VORBIS_NO_CRT

[0-0.2.20210728git3a11740]
- Use symlinks so including 'stb_foo.h' and 'stb/stb_foo.h' both work

[0-0.1.20210728git3a11740]
- Initial package for EPEL8

Updated Packages

Release/Architecture

Filename

sha256

Superseded By Advisory

Channel Label

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team