Accepting request 511585 from GNOME:Next

New stable release, CVE fix

OBS-URL: https://build.opensuse.org/request/show/511585
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/librsvg?expand=0&rev=109
This commit is contained in:
Bjørn Lie 2017-07-20 10:43:17 +00:00 committed by Git OBS Bridge
parent bc23c266d9
commit 0d97dd3fb1
4 changed files with 15 additions and 4 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:e6f6c5cbecc405bb945c7cd15061276035ae3173bbb3bb25e8a916779c7f69cc
size 573244

3
librsvg-2.40.18.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:bfc8c488c89c1e7212c478beb95c41b44701636125a3e6dab41187f1485b564c
size 574384

View File

@ -1,3 +1,14 @@
-------------------------------------------------------------------
Thu Jul 20 09:00:14 UTC 2017 - zaitor@opensuse.org
- Update to version 2.40.18 (boo#1049607, CVE-2017-11464):
+ Fix division-by-zero in the Gaussian blur code (bgo#783835,
boo#1049607, CVE-2017-11464).
+ Fix other cases of division-by-zero on fuzzed SVG files.
+ Don't crash on invalid transformation matrices.
+ Support Visual Studio 2017; generate .pc files for Meson on
Windows.
-------------------------------------------------------------------
Mon Apr 10 07:06:52 UTC 2017 - zaitor@opensuse.org

View File

@ -17,7 +17,7 @@
Name: librsvg
Version: 2.40.17
Version: 2.40.18
Release: 0
Summary: A Library for Rendering SVG Data
License: LGPL-2.0+ and GPL-2.0+