From 7a4b14b23b2a86e178bd343cf3ee94a3ca9032b9b72913e0b9b42f4d75821e89 Mon Sep 17 00:00:00 2001 From: Stefan Dirsch Date: Fri, 20 Oct 2017 13:59:39 +0000 Subject: [PATCH] - Update to release 1.5.3 * Check for end of string in PatternMatch (CVE-2017-13720) * pcfGetProperties: Check string boundaries (CVE-2017-13722) OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXfont?expand=0&rev=30 --- libXfont-1.5.2.tar.bz2 | 3 --- libXfont-1.5.3.tar.bz2 | 3 +++ libXfont.changes | 7 +++++++ libXfont.spec | 2 +- 4 files changed, 11 insertions(+), 4 deletions(-) delete mode 100644 libXfont-1.5.2.tar.bz2 create mode 100644 libXfont-1.5.3.tar.bz2 diff --git a/libXfont-1.5.2.tar.bz2 b/libXfont-1.5.2.tar.bz2 deleted file mode 100644 index d000b30..0000000 --- a/libXfont-1.5.2.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:02945ea68da447102f3e6c2b896c1d2061fd115de99404facc2aca3ad7010d71 -size 530367 diff --git a/libXfont-1.5.3.tar.bz2 b/libXfont-1.5.3.tar.bz2 new file mode 100644 index 0000000..544b11a --- /dev/null +++ b/libXfont-1.5.3.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ab85c10fd2683481dfef672a77fe60e6a2039558cbc0e9bf56b5e1df471c93d0 +size 519793 diff --git a/libXfont.changes b/libXfont.changes index 04d90f8..4733417 100644 --- a/libXfont.changes +++ b/libXfont.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Fri Oct 20 13:56:21 UTC 2017 - sndirsch@suse.com + +- Update to release 1.5.3 + * Check for end of string in PatternMatch (CVE-2017-13720) + * pcfGetProperties: Check string boundaries (CVE-2017-13722) + ------------------------------------------------------------------- Tue May 30 10:07:46 UTC 2017 - sndirsch@suse.com diff --git a/libXfont.spec b/libXfont.spec index 6c842f3..3d520e0 100644 --- a/libXfont.spec +++ b/libXfont.spec @@ -18,7 +18,7 @@ Name: libXfont %define lname libXfont1 -Version: 1.5.2 +Version: 1.5.3 Release: 0 Summary: X font handling library for server and utilities License: MIT