packages (AC-branch): ImageMagick/ImageMagick.spec - changelog HEAD merge (...

Mon May 25 01:44:03 CEST 2009

Author: glen                         Date: Sun May 24 23:44:03 2009 GMT
Module: packages                      Tag: AC-branch
---- Log message:
- changelog HEAD merge (cve refs)

---- Files affected:
packages/ImageMagick:
   ImageMagick.spec (1.222.2.7 -> 1.222.2.8) 

---- Diffs:

================================================================
Index: packages/ImageMagick/ImageMagick.spec
diff -u packages/ImageMagick/ImageMagick.spec:1.222.2.7 packages/ImageMagick/ImageMagick.spec:1.222.2.8

--- packages/ImageMagick/ImageMagick.spec:1.222.2.7	Mon May 11 15:07:13 2009
+++ packages/ImageMagick/ImageMagick.spec	Mon May 25 01:43:57 2009
@@ -981,6 +981,9 @@
 All persons listed below can be reached at <cvs_login>@pld-linux.org
 
 $Log$
+Revision 1.222.2.8  2009/05/24 23:43:57  glen
+- changelog HEAD merge (cve refs)
+
 Revision 1.222.2.7  2009/05/11 13:07:13  glen
 - convert spec to utf8
 
@@ -1037,7 +1040,7 @@
 - STBR
 
 Revision 1.212  2005/06/20 17:40:43  saq
-- up to 6.2.3-2
+- up to 6.2.3-2 [fixes CVE-2005-1275 CVE-2005-1739]
 
 Revision 1.211  2005/05/21 16:08:00  glen
 - TODO security
@@ -1065,6 +1068,7 @@
 - update to version 6.2.0-4
 - this version resolves security problem (for details see
   http://www.k-otik.com/english/advisories/2005/0227)
+[CVE-2005-0397]
 
 Revision 1.203  2005/02/02 21:08:43  adgor
 - Removed fpx.c.patch
@@ -1087,7 +1091,7 @@
 - updated to 6.1.8-5
 
 Revision 1.197  2005/01/07 13:36:43  hawk
-- updated to 6.1.8-0
+- updated to 6.1.8-0 [fixes CVE-2005-0761]
 
 Revision 1.196  2005/01/06 20:47:16  qboosh
 - 6.1.7-5 no longer exists on given site, so point up: 6.1.7-6
@@ -1118,25 +1122,25 @@
 - oh well, 6.1.0-9
 
 Revision 1.187  2004/10/13 18:10:33  hawk
-- updated to 6.1.0-8
+- updated to 6.1.0-8 [fixes CVE-2004-0981]
 - libpath and system-libltdl patches seems to be obsolete now
 - user guide is no longer included in package, doc subpackage removed
 - builds but not tested
 
 Revision 1.186  2004/10/12 01:42:31  adasi
- - Never abuse word 'freeware'.
- - It's apache-style, GPL-compatible license
+- Never abuse word 'freeware'.
+- It's apache-style, GPL-compatible license
 
 Revision 1.185  2004/09/05 19:28:43  hawk
 - updated to 6.0.7-1
 
 Revision 1.184  2004/08/30 11:26:44  hawk
-- updated to 6.0.6-2
+- updated to 6.0.6-2 [fixes CVE-2004-0827]
 
 Revision 1.183  2004/08/28 10:35:41  undefine
 - R: (for ImageMagick-deve)
-[undefine at sv1 undefine]$ Magick-config --libs
--lMagick -llcms -ltiff -lfreetype -ljpeg -lXext -lSM -lICE -lX11 -lXt -lbz2 -lz -lpthread -lm -lpthread
+  [undefine at sv1 undefine]$ Magick-config --libs
+  -lMagick -llcms -ltiff -lfreetype -ljpeg -lXext -lSM -lICE -lX11 -lXt -lbz2 -lz -lpthread -lm -lpthread
 
 Revision 1.182  2004/08/27 21:08:19  ankry
 - rel. 2
@@ -1196,6 +1200,7 @@
 Revision 1.165  2004/04/25 12:20:20  qboosh
 - updated to 6.0.0-2, removed obsolete magickpp-version patch
 - strict internal deps, separated new dot coder (uses graphviz libs)
+[fixes CVE-2005-0759 CVE-2005-0760 CVE-2005-0762]
 
 Revision 1.164  2004/04/12 22:33:15  pbern
 - add BR: txt2html
@@ -1245,16 +1250,16 @@
 Revision 1.150  2003/07/01 18:25:40  misi3k
 - rel 3
 - added security patch (no 5)
-CVE: CAN-2003-0455
-BUG(sectrack):
-A vulnerability was reported in ImageMagick. A local user may be able to obtain
-elevated privileges on the system.
+  CVE: CAN-2003-0455
+  BUG(sectrack):
+  A vulnerability was reported in ImageMagick. A local user may be able to obtain
+  elevated privileges on the system.
 
 Revision 1.149  2003/06/23 18:20:45  jareq
 - fixed epoch:version issue
 
 Revision 1.148  2003/06/14 15:49:56  radzio
-- updated %%{name}-perlpath.patch (fix bug no. 675 & 647)
+- updated %{name}-perlpath.patch (fix bug no. 675 & 647)
 - rel 2
 
 Revision 1.147  2003/06/12 11:33:47  qboosh
@@ -1293,7 +1298,7 @@
 - updated to 5.5.5
 
 Revision 1.136  2003/02/13 22:22:55  qboosh
-- fixed %%files and simplified includedir for c++
+- fixed %files and simplified includedir for c++
 
 Revision 1.135  2003/02/05 13:14:49  misiek
 - rebuild
@@ -1302,10 +1307,10 @@
 - updated to 5.5.4-2
 
 Revision 1.133  2003/01/30 11:12:47  wiget
-- updated to 5.5.4-1
+- updated to 5.5.4-1 [fixes CVE-2003-0555]
 
 Revision 1.132  2003/01/06 13:45:49  ankry
-- fixed %%pver: updated to 5.5.3-2
+- fixed %pver: updated to 5.5.3-2
 
 Revision 1.131  2002/12/26 20:32:52  qboosh
 - updated to 5.5.3, BR: fixed libtool
@@ -1358,7 +1363,7 @@
 - added --without cxx bcond (Magick++ need fixes for gcc 3.2)
 - build with dlopened modules support (now is possible to split this package
   into small subpackages)
-TODO: Move to HEAD before cleanup and tests.
+  TODO: Move to HEAD before cleanup and tests.
 
 Revision 1.122  2002/09/14 09:54:46  qboosh
 - removed obsolete old_am patch and some hacks from spec
@@ -1374,4 +1379,4 @@
 
 Revision 1.16.4.1  2002/07/03 20:01:36  ankry
 - version 5.4.7, release 1
-- BR: automake >= 1.6 (hopefully not 1.6.2 - %%patch4)
+- BR: automake >= 1.6 (hopefully not 1.6.2 - %patch4)
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/packages/ImageMagick/ImageMagick.spec?r1=1.222.2.7&r2=1.222.2.8&f=u

