Update to libpng 1.2.33

This commit is contained in:
Tom Lane 2008-11-02 20:47:40 +00:00
parent 9d40c61e55
commit 038afbfd3d
4 changed files with 7 additions and 23 deletions

View File

@ -1 +1 @@
libpng-1.2.31.tar.bz2
libpng-1.2.33.tar.bz2

View File

@ -1,17 +0,0 @@
Patch for CVE-2008-3964
diff -ru4NwbB libpng-1.2.31/pngpread.c libpng-1.2.32beta01/pngpread.c
--- libpng-1.2.31/pngpread.c 2008-08-21 05:54:13.254898477 -0500
+++ libpng-1.2.32beta01/pngpread.c 2008-09-06 07:03:43.043602194 -0500
@@ -1278,9 +1278,9 @@
tmp = text;
text = (png_charp)png_malloc(png_ptr, text_size +
(png_uint_32)(png_ptr->zbuf_size
- - png_ptr->zstream.avail_out));
+ - png_ptr->zstream.avail_out + 1));
png_memcpy(text, tmp, text_size);
png_free(png_ptr, tmp);
png_memcpy(text + text_size, png_ptr->zbuf,
png_ptr->zbuf_size - png_ptr->zstream.avail_out);

View File

@ -1,8 +1,8 @@
Summary: A library of functions for manipulating PNG image format files
Name: libpng
Epoch: 2
Version: 1.2.31
Release: 2%{?dist}
Version: 1.2.33
Release: 1%{?dist}
License: zlib
Group: System Environment/Libraries
URL: http://www.libpng.org/pub/png/
@ -10,7 +10,6 @@ URL: http://www.libpng.org/pub/png/
Source: ftp://ftp.simplesystems.org/pub/png/src/libpng-%{version}.tar.bz2
Patch0: libpng-multilib.patch
Patch1: libpng-pngconf.patch
Patch2: libpng-ztxt-bug.patch
Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root
BuildRequires: zlib-devel
@ -54,7 +53,6 @@ necessary for some boot packages.
%patch0 -p1
%patch1 -p1
%patch2 -p1
%build
%configure
@ -93,6 +91,9 @@ rm -rf $RPM_BUILD_ROOT%{_libdir}/libpng12.la
rm -rf $RPM_BUILD_ROOT
%changelog
* Sun Nov 2 2008 Tom Lane <tgl@redhat.com> 2:1.2.33-1
- Update to libpng 1.2.33
* Tue Sep 9 2008 Tom Lane <tgl@redhat.com> 2:1.2.31-2
- Apply upstream patch for zTXT buffer overrun (CVE-2008-3964)
Related: #461599

View File

@ -1 +1 @@
78d2f8c4e0d64f8948819563587302d3 libpng-1.2.31.tar.bz2
0532c28ba1b17ee2095ad50731c2c75c libpng-1.2.33.tar.bz2