rpms/libpng10/EL-6 .cvsignore, 1.26, 1.27 libpng10.spec, 1.37, 1.38 sources, 1.26, 1.27

Paul Howarth pghmcfc at fedoraproject.org
Fri Jul 2 12:01:33 UTC 2010


Author: pghmcfc

Update of /cvs/pkgs/rpms/libpng10/EL-6
In directory cvs01.phx2.fedoraproject.org:/tmp/cvs-serv32516/EL-6

Modified Files:
	.cvsignore libpng10.spec sources 
Log Message:
* Fri Jul  2 2010 Paul Howarth <paul at city-fan.org> 1.0.54-1
- update to 1.0.54
  - fixes CVE-2010-1205 (out-of-bounds write to memory)
  - fixes CVE-2010-2249 (memory leak with images having malformed sCAL chunks)



Index: .cvsignore
===================================================================
RCS file: /cvs/pkgs/rpms/libpng10/EL-6/.cvsignore,v
retrieving revision 1.26
retrieving revision 1.27
diff -u -p -r1.26 -r1.27
--- .cvsignore	1 Mar 2010 16:21:09 -0000	1.26
+++ .cvsignore	2 Jul 2010 12:01:32 -0000	1.27
@@ -1 +1 @@
-libpng-1.0.53.tar.bz2
+libpng-1.0.54.tar.bz2


Index: libpng10.spec
===================================================================
RCS file: /cvs/pkgs/rpms/libpng10/EL-6/libpng10.spec,v
retrieving revision 1.37
retrieving revision 1.38
diff -u -p -r1.37 -r1.38
--- libpng10.spec	11 May 2010 06:41:02 -0000	1.37
+++ libpng10.spec	2 Jul 2010 12:01:33 -0000	1.38
@@ -1,6 +1,6 @@
 Summary:	Old version of libpng, needed to run old binaries
 Name:		libpng10
-Version:	1.0.53
+Version:	1.0.54
 Release:	1%{?dist}
 License:	zlib
 Group:		System Environment/Libraries
@@ -111,6 +111,11 @@ libpng10-devel.
 %{_libdir}/pkgconfig/libpng10.pc
 
 %changelog
+* Fri Jul  2 2010 Paul Howarth <paul at city-fan.org> 1.0.54-1
+- update to 1.0.54
+  - fixes CVE-2010-1205 (out-of-bounds write to memory)
+  - fixes CVE-2010-2249 (memory leak with images having malformed sCAL chunks)
+
 * Thu Feb 25 2010 Paul Howarth <paul at city-fan.org> 1.0.53-1
 - update to 1.0.53
   - fixes CVE-2010-0205 (libpng stalls on highly compressed ancillary chunks)


Index: sources
===================================================================
RCS file: /cvs/pkgs/rpms/libpng10/EL-6/sources,v
retrieving revision 1.26
retrieving revision 1.27
diff -u -p -r1.26 -r1.27
--- sources	1 Mar 2010 16:21:09 -0000	1.26
+++ sources	2 Jul 2010 12:01:33 -0000	1.27
@@ -1 +1 @@
-98b7318e4ae339b8baeac66e0e1377d9  libpng-1.0.53.tar.bz2
+cfd76e484cf37ee7edc1eb9fb13ef9d1  libpng-1.0.54.tar.bz2



More information about the scm-commits mailing list