[packages/libpng/LIBPNG_1_2] up to 1.2.50, fixes CVE-2012-3386 - a build time vulnreability

glen glen at pld-linux.org
Thu Sep 6 09:34:06 CEST 2012


commit e29e17cbf6c8966d12cd8246962e5f80fa5f64cc
Author: Elan Ruusamäe <glen at delfi.ee>
Date:   Thu Sep 6 10:31:23 2012 +0300

    up to 1.2.50, fixes CVE-2012-3386 - a build time vulnreability

 libpng.spec | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)
---
diff --git a/libpng.spec b/libpng.spec
index a223ea9..a8a2f33 100644
--- a/libpng.spec
+++ b/libpng.spec
@@ -1,4 +1,3 @@
-# NOTE: try to switch to ac/am/lt build on 1.2.x->1.4.x upgrade
 Summary:	PNG library
 Summary(de.UTF-8):	PNG-Library
 Summary(es.UTF-8):	Biblioteca PNG
@@ -7,13 +6,13 @@ Summary(pl.UTF-8):	Biblioteka PNG
 Summary(pt_BR.UTF-8):	Biblioteca PNG
 Summary(tr.UTF-8):	PNG kitaplığı
 Name:		libpng
-Version:	1.2.49
+Version:	1.2.50
 Release:	1
 Epoch:		2
 License:	distributable
 Group:		Libraries
 Source0:	http://downloads.sourceforge.net/libpng/%{name}-%{version}.tar.xz
-# Source0-md5:	2e7966a54826a4735f3f52bd8c763c79
+# Source0-md5:	a3e00fccbfe356174ab515b5c00641c7
 Patch0:		%{name}-pngminus.patch
 Patch1:		%{name}-opt.patch
 Patch2:		%{name}-norpath.patch
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/libpng.git/commitdiff/e29e17cbf6c8966d12cd8246962e5f80fa5f64cc



More information about the pld-cvs-commit mailing list