[libpng10] Update to 1.0.59

Paul Howarth pghmcfc at fedoraproject.org
Thu Mar 29 14:06:27 UTC 2012


commit 5b88032d178ae2b0f44b4d30b29498034d83ecd6
Author: Paul Howarth <paul at city-fan.org>
Date:   Thu Mar 29 15:05:19 2012 +0100

    Update to 1.0.59
    
    - New upstream release 1.0.59
      - Revised png_set_text_2() to avoid potential memory corruption
        (CVE-2011-3048)
      - Prevent PNG_EXPAND+PNG_SHIFT doing the shift twice

 libpng10.spec |    8 +++++++-
 sources       |    2 +-
 2 files changed, 8 insertions(+), 2 deletions(-)
---
diff --git a/libpng10.spec b/libpng10.spec
index aaa0f07..91c6137 100644
--- a/libpng10.spec
+++ b/libpng10.spec
@@ -1,6 +1,6 @@
 Summary:	Old version of libpng, needed to run old binaries
 Name:		libpng10
-Version:	1.0.58
+Version:	1.0.59
 Release:	1%{?dist}
 License:	zlib
 Group:		System Environment/Libraries
@@ -111,6 +111,12 @@ rm -rf %{buildroot}
 %{_libdir}/pkgconfig/libpng10.pc
 
 %changelog
+* Thu Mar 29 2012 Paul Howarth <paul at city-fan.org> 1.0.59-1
+- update to 1.0.59
+  - revised png_set_text_2() to avoid potential memory corruption
+    (CVE-2011-3048)
+  - prevent PNG_EXPAND+PNG_SHIFT doing the shift twice
+
 * Fri Mar  9 2012 Paul Howarth <paul at city-fan.org> 1.0.58-1
 - update to 1.0.58
   - fix bug with png_handle_hIST with odd chunk length
diff --git a/sources b/sources
index 1f53efc..3bf3dab 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-286a09403703ffd54b3b17041714ec07  libpng-1.0.58.tar.bz2
+ac6db872db91b50f12dacb40221451da  libpng-1.0.59.tar.bz2


More information about the scm-commits mailing list