Accepting request 548488 from multimedia:libs

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/548488
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/lcms2?expand=0&rev=29
This commit is contained in:
Dominique Leuenberger 2017-12-29 17:48:28 +00:00 committed by Git OBS Bridge
commit 11ea72f79b
5 changed files with 22 additions and 32 deletions

View File

@ -1,25 +0,0 @@
From 5ca71a7bc18b6897ab21d815d15e218e204581e2 Mon Sep 17 00:00:00 2001
From: Marti <marti.maria@tktbrainpower.com>
Date: Mon, 15 Aug 2016 23:31:39 +0200
Subject: [PATCH] Added an extra check to MLU bounds
Thanks to Ibrahim el-sayed for spotting the bug
---
src/cmstypes.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/cmstypes.c b/src/cmstypes.c
index cb61860..c7328b9 100644
--- a/src/cmstypes.c
+++ b/src/cmstypes.c
@@ -1460,6 +1460,7 @@ void *Type_MLU_Read(struct _cms_typehandler_struct* self, cmsIOHANDLER* io, cmsU
// Check for overflow
if (Offset < (SizeOfHeader + 8)) goto Error;
+ if ((Offset + Len) > SizeOfTag + 8) goto Error;
// True begin of the string
BeginOfThisString = Offset - SizeOfHeader - 8;
--
2.7.4

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:66d02b229d2ea9474e62c2b6cd6720fde946155cd1d0d2bffdab829790a0fb22
size 6687005

3
lcms2-2.9.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:48c6fdf98396fa245ed86e622028caf49b96fa22f3e5734f853f806fbc8e7d20
size 10974649

View File

@ -1,3 +1,18 @@
-------------------------------------------------------------------
Mon Nov 27 22:57:10 UTC 2017 - plinnell@opensuse.org
- Update to 2.9
- Drop 0001-Added-an-extra-check-to-MLU-bounds.patch, it is now
in the upstream code
* Bugfix release
+ Several fixes related with security, and therefore not detailed here.
+ C++ compiles now without warnings
+ Added OSX and clang in travis
+ Added a travis-ci test matrix for many compilers and OS.
Thanks to Thomas Weber (debian) for this great improvement.
+ testbed can now work with dynamic versions of library
+ Fixed wrong planar formatters regarding linestride interpretation
-------------------------------------------------------------------
Tue Jan 24 00:47:25 UTC 2017 - plinnell@opensuse.org

View File

@ -1,7 +1,7 @@
#
# spec file for package lcms2
#
# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -21,7 +21,7 @@ Summary: Little CMS Engine - A color managment library and tools
License: MIT
Group: Productivity/Graphics/Other
Url: http://www.littlecms.com/
Version: 2.8
Version: 2.9
Release: 0
%if 0%{?suse_version}
@ -55,7 +55,7 @@ Source0: http://sourceforge.net/projects/lcms/files/lcms/%{version}/%{nam
Source1: baselibs.conf
Patch1: lcms2-ocloexec.patch
Patch2: lcms2-visibility.patch
Patch3: 0001-Added-an-extra-check-to-MLU-bounds.patch
%description
Littlecms is a small speed optimized color management engine.
@ -97,7 +97,7 @@ This package contains user and developer documentation for lcms2.
%setup -q
%patch1
%patch2
%patch3 -p1
chmod a-x doc/* COPYING AUTHORS
%build