[packages/optipng] - updated to 0.7.8 (fixes global-buffer-overflow vulnerability in the GIF reader)

qboosh qboosh at pld-linux.org
Sun Aug 11 19:45:49 CEST 2024


commit 4765fbe5f19d43bf281dc7f42003e9323bccf91f
Author: Jakub Bogusz <qboosh at pld-linux.org>
Date:   Sun Aug 11 19:48:19 2024 +0200

    - updated to 0.7.8 (fixes global-buffer-overflow vulnerability in the GIF reader)

 optipng.spec | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)
---
diff --git a/optipng.spec b/optipng.spec
index 07d425e..1e9fbe0 100644
--- a/optipng.spec
+++ b/optipng.spec
@@ -1,6 +1,6 @@
 #
 # Conditional build:
-%bcond_with	system_libpng	# use system libpng (forces system zlib; not ready for libpng 1.5)
+%bcond_with	system_libpng	# use system libpng (forces system zlib)
 %bcond_with	system_zlib	# use system zlib (included one is slightly more aggressive)
 #
 %if %{with system_libpng}
@@ -10,15 +10,15 @@ Summary:	Optimizer for png files
 Summary(pl.UTF-8):	Optymalizator plików png
 Summary(pt_BR.UTF-8):	Utilitário para compressão de pngs
 Name:		optipng
-Version:	0.7.7
+Version:	0.7.8
 Release:	1
 License:	BSD, Zlib/libpng
 Group:		Applications/Graphics
-Source0:	http://downloads.sourceforge.net/optipng/%{name}-%{version}.tar.gz
-# Source0-md5:	211101965baf42fd24a2aa990b7e842e
-URL:		http://optipng.sourceforge.net/
-%{?with_system_libpng:BuildRequires:	libpng-devel >= 1.4.12}
-%{?with_system_zlib:BuildRequires:	zlib-devel >= 1.2.7}
+Source0:	https://downloads.sourceforge.net/optipng/%{name}-%{version}.tar.gz
+# Source0-md5:	e340235722cc39ed3b8bc539b9c63f2d
+URL:		https://optipng.sourceforge.net/
+%{?with_system_libpng:BuildRequires:	libpng-devel >= 2:1.6.40}
+%{?with_system_zlib:BuildRequires:	zlib-devel >= 1.3}
 BuildRoot:	%{tmpdir}/%{name}-%{version}-root-%(id -u -n)
 
 %description
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/optipng.git/commitdiff/4765fbe5f19d43bf281dc7f42003e9323bccf91f



More information about the pld-cvs-commit mailing list