rpms/libpng10/F-12 .cvsignore, 1.26, 1.27 libpng10.spec, 1.36, 1.37 sources, 1.26, 1.27

Paul Howarth pghmcfc at fedoraproject.org
Fri Jul 2 12:01:35 UTC 2010


Author: pghmcfc

Update of /cvs/pkgs/rpms/libpng10/F-12
In directory cvs01.phx2.fedoraproject.org:/tmp/cvs-serv32516/F-12

Modified Files:
	.cvsignore libpng10.spec sources 
Log Message:
* Fri Jul  2 2010 Paul Howarth <paul at city-fan.org> 1.0.54-1
- update to 1.0.54
  - fixes CVE-2010-1205 (out-of-bounds write to memory)
  - fixes CVE-2010-2249 (memory leak with images having malformed sCAL chunks)



Index: .cvsignore
===================================================================
RCS file: /cvs/pkgs/rpms/libpng10/F-12/.cvsignore,v
retrieving revision 1.26
retrieving revision 1.27
diff -u -p -r1.26 -r1.27
--- .cvsignore	1 Mar 2010 16:21:09 -0000	1.26
+++ .cvsignore	2 Jul 2010 12:01:33 -0000	1.27
@@ -1 +1 @@
-libpng-1.0.53.tar.bz2
+libpng-1.0.54.tar.bz2


Index: libpng10.spec
===================================================================
RCS file: /cvs/pkgs/rpms/libpng10/F-12/libpng10.spec,v
retrieving revision 1.36
retrieving revision 1.37
diff -u -p -r1.36 -r1.37
--- libpng10.spec	1 Mar 2010 16:21:09 -0000	1.36
+++ libpng10.spec	2 Jul 2010 12:01:34 -0000	1.37
@@ -1,6 +1,6 @@
 Summary:	Old version of libpng, needed to run old binaries
 Name:		libpng10
-Version:	1.0.53
+Version:	1.0.54
 Release:	1%{?dist}
 License:	zlib
 Group:		System Environment/Libraries
@@ -111,8 +111,14 @@ libpng10-devel.
 %{_libdir}/pkgconfig/libpng10.pc
 
 %changelog
+* Fri Jul  2 2010 Paul Howarth <paul at city-fan.org> 1.0.54-1
+- update to 1.0.54
+  - fixes CVE-2010-1205 (out-of-bounds write to memory)
+  - fixes CVE-2010-2249 (memory leak with images having malformed sCAL chunks)
+
 * Thu Feb 25 2010 Paul Howarth <paul at city-fan.org> 1.0.53-1
-- update to 1.0.53 (minor changes, see ANNOUNCE for details)
+- update to 1.0.53
+  - fixes CVE-2010-0205 (libpng stalls on highly compressed ancillary chunks)
 - drop patch for #555485, included upstream
 
 * Fri Jan  7 2010 Paul Howarth <paul at city-fan.org> 1.0.52-2


Index: sources
===================================================================
RCS file: /cvs/pkgs/rpms/libpng10/F-12/sources,v
retrieving revision 1.26
retrieving revision 1.27
diff -u -p -r1.26 -r1.27
--- sources	1 Mar 2010 16:21:09 -0000	1.26
+++ sources	2 Jul 2010 12:01:34 -0000	1.27
@@ -1 +1 @@
-98b7318e4ae339b8baeac66e0e1377d9  libpng-1.0.53.tar.bz2
+cfd76e484cf37ee7edc1eb9fb13ef9d1  libpng-1.0.54.tar.bz2



More information about the scm-commits mailing list