rpms/mingw32-libpng/F-12 mingw32-libpng-fix-invalid-exports.patch, NONE, 1.1 .cvsignore, 1.4, 1.5 mingw32-libpng.spec, 1.6, 1.7 sources, 1.4, 1.5

[epienbro]

Author: epienbro

Update of /cvs/pkgs/rpms/mingw32-libpng/F-12
In directory cvs01.phx2.fedoraproject.org:/tmp/cvs-serv23675/F-12

Modified Files:
	.cvsignore mingw32-libpng.spec sources 
Added Files:
	mingw32-libpng-fix-invalid-exports.patch 
Log Message:
- Update to 1.2.44
- Fixes CVE-2010-1205 and CVE-2010-2249 (RHBZ #608644 and #608238)


mingw32-libpng-fix-invalid-exports.patch:
 configure |    5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

--- NEW FILE mingw32-libpng-fix-invalid-exports.patch ---
--- configure.orig	2009-11-20 01:18:09.926590381 +0100
+++ configure	2009-11-20 01:18:37.352678377 +0100
@@ -11447,10 +11447,7 @@
 if test "$have_ld_version_script" = "yes"; then
     { $as_echo "$as_me:${as_lineno-$LINENO}: checking for symbol prefix" >&5
 $as_echo_n "checking for symbol prefix... " >&6; }
-    SYMBOL_PREFIX=`echo "PREFIX=__USER_LABEL_PREFIX__" \
-                   | ${CPP-${CC-gcc} -E} - 2>&1 \
-                   | ${EGREP-grep} "^PREFIX=" \
-                   | ${SED-sed} "s:^PREFIX=::"`
+    SYMBOL_PREFIX=""
 
     { $as_echo "$as_me:${as_lineno-$LINENO}: result: $SYMBOL_PREFIX" >&5
 $as_echo "$SYMBOL_PREFIX" >&6; }


Index: .cvsignore
===================================================================
RCS file: /cvs/pkgs/rpms/mingw32-libpng/F-12/.cvsignore,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -p -r1.4 -r1.5
--- .cvsignore	9 Jun 2009 12:52:50 -0000	1.4
+++ .cvsignore	4 Jul 2010 15:37:54 -0000	1.5
@@ -1 +1 @@
-libpng-1.2.37.tar.bz2
+libpng-1.2.40.tar.bz2


Index: mingw32-libpng.spec
===================================================================
RCS file: /cvs/pkgs/rpms/mingw32-libpng/F-12/mingw32-libpng.spec,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -p -r1.6 -r1.7
--- mingw32-libpng.spec	25 Jul 2009 12:22:59 -0000	1.6
+++ mingw32-libpng.spec	4 Jul 2010 15:37:54 -0000	1.7
@@ -5,8 +5,8 @@
 %define __find_provides %{_mingw32_findprovides}
 
 Name:           mingw32-libpng
-Version:        1.2.37
-Release:        2%{?dist}
+Version:        1.2.44
+Release:        1%{?dist}
 Summary:        MinGW Windows Libpng library
 
 License:        zlib
@@ -14,6 +14,7 @@ URL:            http://www.libpng.org/pu
 Source0:        ftp://ftp.simplesystems.org/pub/png/src/libpng-%{version}.tar.bz2
 Patch0:         libpng-multilib.patch
 Patch1:         libpng-pngconf.patch
+Patch2:         mingw32-libpng-fix-invalid-exports.patch
 
 Group:          Development/Libraries
 BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
@@ -36,6 +37,14 @@ MinGW Windows Libpng library.
 %patch0 -p1
 %patch1 -p1
 
+# The configure script tries to generate a prefix which is used for
+# symbol declarations. However, when this prefix is prefix is used
+# the resulting DLL's don't have any exported symbols at all
+# When we drop this prefix we retain backwards compatibility with
+# older versions of mingw32-libpng. We might need to research this
+# issue more to find out the real cause, but this will do for now
+%patch2 -p0
+
 
 %build
 %{_mingw32_configure}
@@ -78,6 +87,17 @@ rm -rf $RPM_BUILD_ROOT
 
 
 %changelog
+* Sun Jul  4 2010 Erik van Pienbroek <epienbro at fedoraproject.org> - 1.2.44-1
+- Update to 1.2.44
+- Fixes CVE-2010-1205 and CVE-2010-2249 (RHBZ #608644 and #608238)
+
+* Fri Nov 20 2009 Erik van Pienbroek <epienbro at fedoraproject.org> - 1.2.40-2
+- In the previous build no symbols were exported in the resulting DLL making this
+  package unusable. This should be fixed for now (but may need more research)
+
+* Thu Nov  5 2009 Richard W.M. Jones <rjones at redhat.com> - 1.2.40-1
+- New upstream version 1.2.40.
+
 * Sat Jul 25 2009 Fedora Release Engineering <rel-eng at lists.fedoraproject.org> - 1.2.37-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
 


Index: sources
===================================================================
RCS file: /cvs/pkgs/rpms/mingw32-libpng/F-12/sources,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -p -r1.4 -r1.5
--- sources	9 Jun 2009 12:52:51 -0000	1.4
+++ sources	4 Jul 2010 15:37:54 -0000	1.5
@@ -1 +1 @@
-6d1ee0888dbb711214943cb19c294b49  libpng-1.2.37.tar.bz2
+29bbd1c3cbe54b04bfc2bda43067ccb5  libpng-1.2.40.tar.bz2