From bf8829a37193642761749546951dca153f6639e4 Mon Sep 17 00:00:00 2001 From: Leonard Lausen Date: Wed, 18 Mar 2020 00:49:36 +0000 Subject: [PATCH 1/2] libjpeg-turbo: Fix user-assisted execution of arbitrary code Reference https://security.gentoo.org/glsa/202003-23 --- tools/dependencies/libturbojpeg.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/dependencies/libturbojpeg.sh b/tools/dependencies/libturbojpeg.sh index 0c9eb97ba514..f05b7ef32884 100755 --- a/tools/dependencies/libturbojpeg.sh +++ b/tools/dependencies/libturbojpeg.sh @@ -20,7 +20,7 @@ # This script builds the static library of libturbojpeg that can be used as dependency of # mxnet/opencv. set -ex -TURBO_JPEG_VERSION=2.0.2 +TURBO_JPEG_VERSION=2.0.3 if [[ $PLATFORM == 'darwin' ]]; then JPEG_NASM_OPTION="-D CMAKE_ASM_NASM_COMPILER=/usr/local/bin/nasm" fi From 448327fc216cce210a0a888817125a0108e25941 Mon Sep 17 00:00:00 2001 From: Leonard Lausen Date: Tue, 17 Mar 2020 19:18:08 -0700 Subject: [PATCH 2/2] Update libturbojpeg.sh --- tools/dependencies/libturbojpeg.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/dependencies/libturbojpeg.sh b/tools/dependencies/libturbojpeg.sh index f05b7ef32884..911827a16fcf 100755 --- a/tools/dependencies/libturbojpeg.sh +++ b/tools/dependencies/libturbojpeg.sh @@ -20,7 +20,7 @@ # This script builds the static library of libturbojpeg that can be used as dependency of # mxnet/opencv. set -ex -TURBO_JPEG_VERSION=2.0.3 +TURBO_JPEG_VERSION=2.0.4 if [[ $PLATFORM == 'darwin' ]]; then JPEG_NASM_OPTION="-D CMAKE_ASM_NASM_COMPILER=/usr/local/bin/nasm" fi