[meego-commits] 5335: Changes to Trunk:Testing/libpng

[Anas Nashif]

That change reverted. Why did you remove apng support? It breaks fennec and probably others.
Anas


On 2010-07-05, at 2:17 AM, Bin Gao wrote:

> Hi,
> I have made the following changes to libpng in project Trunk:Testing. Please review and accept ASAP.
> 
> Thank You,
> Bin Gao
> 
> [This message was auto-generated]
> 
> ---
> 
> Request #5335:
> 
>  submit:   home:bgao1:branches:Trunk:Testing/libpng(r2)(cleanup) -> Trunk:Testing/libpng
> 
> 
> Message:
>    Update to 1.2.44 which includes fix for CVE-2010-1205 (BMC #3657) and CVE-2010-2249 (BMC #3660).
> 
> State:   new          2010-07-04T18:13:03 bgao1
> Comment: None
> 
> 
> 
> changes files:
> --------------
> --- libpng.changes
> +++ libpng.changes
> @@ -0,0 +1,3 @@
> +* Mon Jul 05 2010 Bin Gao <bin.gao at intel.com> - 1.2.44
> +- Update to 1.2.44 which includes CVE fix for CVE-2010-1205 and CVE-2010-2249
> +
> 
> old:
> ----
>  CVE-2010-0205.patch
>  libpng-1.2.37-apng.patch
>  libpng-1.2.37.tar.bz2
> 
> new:
> ----
>  libpng-1.2.44.tar.bz2
> 
> spec files:
> -----------
> --- libpng.spec
> +++ libpng.spec
> @@ -1,13 +1,13 @@
> # 
> # Do not Edit! Generated by:
> -# spectacle version 0.14
> +# spectacle version 0.17
> # 
> # >> macros
> # << macros
> 
> Name:       libpng
> Summary:    A library of functions for manipulating PNG image format files
> -Version:    1.2.37
> +Version:    1.2.44
> Release:    1
> Group:      System/Libraries
> License:    zlib
> @@ -16,13 +16,12 @@
> Source100:  libpng.yaml
> Patch0:     libpng-multilib.patch
> Patch1:     libpng-pngconf.patch
> -Patch2:     libpng-1.2.37-apng.patch
> -Patch3:     libpng-header-fix.patch
> -Patch4:     CVE-2010-0205.patch
> +Patch2:     libpng-header-fix.patch
> Requires(post):  /sbin/ldconfig
> Requires(postun):  /sbin/ldconfig
> BuildRequires:  zlib-devel
> 
> +
> %description
> The libpng package contains a library of functions for creating and
> manipulating PNG (Portable Network Graphics) image format files.  PNG
> @@ -55,12 +54,8 @@
> %patch0 -p1
> # libpng-pngconf.patch
> %patch1 -p1
> -# libpng-1.2.37-apng.patch
> -%patch2 -p1
> # libpng-header-fix.patch
> -%patch3 -p1
> -# CVE-2010-0205.patch
> -%patch4 -p1
> +%patch2 -p1
> # >> setup
> # << setup
> 
> @@ -90,6 +85,8 @@
> 
> 
> 
> +
> +
> %files
> %defattr(-,root,root,-)
> # >> files
> 
> other changes:
> --------------
> 
> ++++++ libpng-1.2.37.tar.bz2 -> libpng-1.2.44.tar.bz2
> 38556 lines of diff (skipped)
> 
> ++++++ libpng.yaml
> --- libpng.yaml
> +++ libpng.yaml
> @@ -1,6 +1,6 @@
> Name: libpng
> Summary: A library of functions for manipulating PNG image format files
> -Version: 1.2.37
> +Version: 1.2.44
> Release: 1
> Group: System/Libraries
> License: zlib
> @@ -10,9 +10,7 @@
> Patches:
>     - libpng-multilib.patch
>     - libpng-pngconf.patch
> -    - libpng-1.2.37-apng.patch
>     - libpng-header-fix.patch
> -    - CVE-2010-0205.patch
> Description: |
>     The libpng package contains a library of functions for creating and
>     manipulating PNG (Portable Network Graphics) image format files.  PNG
> 
> ++++++ deleted files:
> --- CVE-2010-0205.patch
> --- libpng-1.2.37-apng.patch
> _______________________________________________
> Meego-commits mailing list
> Meego-commits at meego.com
> http://lists.meego.com/listinfo/meego-commits