![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / emulators / suse131_libpng
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
Update to latest RPMs from Suse 13.1.
Put back PKGNAME definitions.
Revert define PKGNAME instead of fake DISTNAME PKGNAME is unstable variable in current pkgsrc framework, so packages must not rely on it.
Apply following update to suse131_libpng, bump PKGREVISION.
openSUSE Security Update: Security update for libpng16
______________________________________________________________________________
Announcement ID: openSUSE-SU-2015:0161-1
Rating: important
References: #912076 #912929
Cross-References: CVE-2014-9495 CVE-2015-0973
Affected Products:
openSUSE 13.2
openSUSE 13.1
______________________________________________________________________________
An update that fixes two vulnerabilities is now available.
Description:
libpng was updated to fix some security issues:
* CVE-2014-9495 [bnc#912076]: Heap-buffer overflow png_combine_row() with
very wide interlaced images
* CVE-2015-0973 [bnc#912929]: overflow in png_read_IDAT_data
libpng is now also build with -DPNG_SAFE_LIMITS_SUPPORTED.
Patch Instructions:
To install this openSUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- openSUSE 13.2:
zypper in -t patch openSUSE-2015-79
- openSUSE 13.1:
zypper in -t patch openSUSE-2015-79
To bring your system up-to-date, use "zypper patch".
Package List:
- openSUSE 13.2 (i586 x86_64):
libpng16-16-1.6.13-2.4.1
libpng16-16-debuginfo-1.6.13-2.4.1
libpng16-compat-devel-1.6.13-2.4.1
libpng16-debugsource-1.6.13-2.4.1
libpng16-devel-1.6.13-2.4.1
libpng16-tools-1.6.13-2.4.1
libpng16-tools-debuginfo-1.6.13-2.4.1
- openSUSE 13.2 (x86_64):
libpng16-16-32bit-1.6.13-2.4.1
libpng16-16-debuginfo-32bit-1.6.13-2.4.1
libpng16-compat-devel-32bit-1.6.13-2.4.1
libpng16-devel-32bit-1.6.13-2.4.1
- openSUSE 13.1 (i586 x86_64):
libpng16-16-1.6.6-16.1
libpng16-16-debuginfo-1.6.6-16.1
libpng16-compat-devel-1.6.6-16.1
libpng16-debugsource-1.6.6-16.1
libpng16-devel-1.6.6-16.1
libpng16-tools-1.6.6-16.1
libpng16-tools-debuginfo-1.6.6-16.1
- openSUSE 13.1 (x86_64):
libpng16-16-32bit-1.6.6-16.1
libpng16-16-debuginfo-32bit-1.6.6-16.1
libpng16-compat-devel-32bit-1.6.6-16.1
libpng16-devel-32bit-1.6.6-16.1
References:
http://support.novell.com/security/cve/CVE-2014-9495.html
http://support.novell.com/security/cve/CVE-2015-0973.html
https://bugzilla.suse.com/show_bug.cgi?id=912076
https://bugzilla.suse.com/show_bug.cgi?id=912929
define PKGNAME instead of fake DISTNAME.
Pullup ticket #4400 - requested by obache
emulators/suse131_libpng: security update
Revisions pulled up:
- emulators/suse131_libpng/Makefile 1.4
- emulators/suse131_libpng/distinfo 1.4
---
Module Name: pkgsrc
Committed By: obache
Date: Thu May 8 12:46:36 UTC 2014
Modified Files:
pkgsrc/emulators/suse131_libpng: Makefile distinfo
Log Message:
Apply openSUSE Security Update: openSUSE-SU-2014:0618-1
update for libpng12
Description:
This libpng12 update fixes the following two security
issues.
- bnc#873123: Fixed integer overflow leading to a
heap-based buffer overflow in png_set_sPLT() and
png_set_text_2() (CVE-2013-7354).
- bnc#873124: Fixed integer overflow leading to a
heap-based buffer overflow in png_set_unknown_chunks()
(CVE-2013-7353).
Bump PKGREVISION.
Apply openSUSE Security Update: openSUSE-SU-2014:0618-1 update for libpng12 Description: This libpng12 update fixes the following two security issues. - bnc#873123: Fixed integer overflow leading to a heap-based buffer overflow in png_set_sPLT() and png_set_text_2() (CVE-2013-7354). - bnc#873124: Fixed integer overflow leading to a heap-based buffer overflow in png_set_unknown_chunks() (CVE-2013-7353). Bump PKGREVISION.
Pullup ticket #4344 - requested by obache emulators/suse131_libpng: security update Revisions pulled up: - emulators/suse131_libpng/Makefile 1.3 - emulators/suse131_libpng/distinfo 1.3 --- Module Name: pkgsrc Committed By: obache Date: Thu Mar 13 11:33:47 UTC 2014 Modified Files: pkgsrc/emulators/suse131_libpng: Makefile distinfo Log Message: Update suse131 libpng16 RPM to libpng16-16-1.6.6-12.1 for CVE-2014-0333. Bump PKGREVISION.
Update suse131 libpng16 RPM to libpng16-16-1.6.6-12.1 for CVE-2014-0333. Bump PKGREVISION.
Pullup ticket #4307 - requested by obache emulators/suse131_libpng: security update Revisions pulled up: - emulators/suse131_libpng/Makefile 1.2 - emulators/suse131_libpng/distinfo 1.2 --- Module Name: pkgsrc Committed By: obache Date: Mon Jan 20 12:21:31 UTC 2014 Modified Files: pkgsrc/emulators/suse131_libpng: Makefile distinfo Log Message: Update rpm to libpng16-16-1.6.6-8.1 for CVE-2013-6954. Bump PKGREVISION.
Update rpm to libpng16-16-1.6.6-8.1 for CVE-2013-6954. Bump PKGREVISION.
Added openSUSE 13.1 packages, provides a number of components for a openSUSE-based Linux binary emulation environment.