- version update to 2.5.7

Patch release of 2.5 with security and build fixes:
  * OSS-fuzz 28051 Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer
  * OSS-fuzz 28155 Crash in Imf_2_5::PtrIStream::read
  * Fix broken symlink and pkg-config lib suffix for cmake debug builds
- modified patches
  % 0001-Use-absolute-CMAKE_INSTALL_FULL_LIBDIR-for-libdir-in.patch (refreshed)
- deleted patches
  - openexr-CVE-2021-3598.patch (upstreamed)
  - openexr-CVE-2021-3605.patch (upstreamed)

OBS-URL: https://build.opensuse.org/package/show/graphics/openexr?expand=0&rev=69
This commit is contained in:
2021-08-03 10:47:28 +00:00
committed by Git OBS Bridge
parent 6cc7edd22b
commit b508353971
7 changed files with 45 additions and 72 deletions

View File

@@ -28,7 +28,7 @@
%define sonum 25
%global so_suffix -2_5
Name: %{flavor}
Version: 2.5.6
Version: 2.5.7
Release: 0
%if "%{flavor}" == "openexr"
Summary: Utilities for working with HDR images in OpenEXR format
@@ -44,10 +44,6 @@ URL: http://www.openexr.com/
Source0: https://github.com/openexr/openexr/archive/v%{version}.tar.gz
Source2: baselibs.conf
Patch1: 0001-Use-absolute-CMAKE_INSTALL_FULL_LIBDIR-for-libdir-in.patch
# CVE-2021-3598 [bsc#1187310], Heap buffer overflow in Imf_3_1:CharPtrIO:readChars
Patch2: openexr-CVE-2021-3598.patch
# CVE-2021-3605 [bsc#1187395], Heap buffer overflow in the rleUncompress function
Patch3: openexr-CVE-2021-3605.patch
BuildRequires: cmake
BuildRequires: gcc-c++
BuildRequires: pkgconfig
@@ -227,8 +223,6 @@ Group: System/Libraries
%prep
%setup -q -n %{prjname}-%{version}
%patch1 -p1
%patch2 -p1
%patch3 -p1
%build
%if "%{flavor}" == "openexr"