staticbuild: Fix potential user-assisted execution of arbitrary code (#…

…17860) Previous libjpeg-turbo dependency contains a serious bug reference https://www.openwall.com/lists/oss-security/2019/11/11/1
apache · Mar 19, 2020 · 04167df · 04167df
1 parent ea2320a
commit 04167df
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tools/dependencies/libturbojpeg.sh b/tools/dependencies/libturbojpeg.sh
@@ -20,7 +20,7 @@
 # This script builds the static library of libturbojpeg that can be used as dependency of
 # mxnet/opencv.
 set -ex
-TURBO_JPEG_VERSION=2.0.2
+TURBO_JPEG_VERSION=2.0.4
 if [[ $PLATFORM == 'darwin' ]]; then
     JPEG_NASM_OPTION="-D CMAKE_ASM_NASM_COMPILER=/usr/local/bin/nasm"
 fi