rpm/libXpm
SHA256
1
0
Fork 0
forked from pool/libXpm
Code Pull Requests Activity
32 Commits 1 Branch 0 Tags 592 KiB
factory
Commit Graph

18 Commits

Author SHA256 Message Date
Stefan Dirsch
3dbefaec8e - Update to 3.5.17 
* This release contains fixes for the libXpm issues reported in
    security advisory here: 
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43788 libXpm: out of bounds read in
    XpmCreateXpmImageFromBuffer() (boo#1215686)
  * fixes CVE-2023-43789 libXpm: out of bounds read on XPM with
    corrupted colormap (boo#1215687)

OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=31
 2023-10-03 20:48:43 +00:00
Stefan Dirsch
e6155c5c23 - update to 3.5.16: 
* test: skip compressed file tests when --disable-open-zfile is used
  * gitlab CI: build with each of --enable-open-zfile & --disable-open-zfile
  * configure: correct error message to suggest --disable-open-zfile
  * open-zfile: Make compress & uncompress commands optional
  * Require LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * XpmCreateDataFromXpmImage: Fix misleading indentation
  * parse.c: Wrap FREE_CIDX definition in do { ... } while(0)
  * parse.c: remove unused function xstrlcpy()
  * test: Use PACKAGE_BUGREPORT instead of hard-coded URL's
  * test: Add simple test cases for functions in src/rgb.c
  * xpmReadRgbNames: constify filename argument
  * Fix a memleak in ParsePixels error code path

OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=29
 2023-04-18 11:53:05 +00:00
Stefan Dirsch
7fee1f4ec9 - with switching to suggests making use of (n)compress no longer 
needs to be limited to openSUSE

OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=27
 2023-04-13 09:32:33 +00:00
Stefan Dirsch
6a24dd2dbb - suggests instead of require compress (see changelog below) 
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=26
 2023-04-13 08:19:40 +00:00
Stefan Dirsch
78c0e38f51 - require compress (ncompress package) on openSUSE; it's not 
- improved latest changelog entry (better explnation)

OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=25
 2023-04-12 16:04:18 +00:00
Stefan Dirsch
9d14d04f42 Accepting request 1078729 from home:favogt:xpmsimpler 
- Drop n_no-compress-on-sle.patch and set XPM_PATH_COMPRESS instead

OBS-URL: https://build.opensuse.org/request/show/1078729
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=24
 2023-04-12 15:47:35 +00:00
Stefan Dirsch
a6d21eef27 - Depend also on /usr/bin/uncompress, not only /usr/bin/gzip; 
Requiring binaries instead of packages resolves the file 
  conflict with busybox-gzip, which is used when building nginx
  opensuse images; dep chain was: nginx -> libdg3 -> libXpm4 -> gzip
  ==> conflict with busybox-gzip

OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=23
 2023-04-12 12:56:43 +00:00
Stefan Dirsch
eca7366536 Accepting request 1078595 from home:favogt:branches:X11:XOrg 
- Depend on /usr/bin/gzip, not gzip

OBS-URL: https://build.opensuse.org/request/show/1078595
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=22
 2023-04-12 11:58:08 +00:00
Stefan Dirsch
65d894ba8a - n_no-compress-on-sle.patch 
* we can't handle .Z files, since we don't have ncompress package
    on SLE; so disable this feature as before (bsc#1207031)
- BuildRequires
  * removed again ncompress
  * added again autoconf, automake, libtool
- run again autoreconf due to patch above

- update to 3.5.15:  
  * Use gzip -d instead of gunzip
  * Prevent a double free in the error code path
  * Fix CVE-2022-4883: compression commands depend on $PATH
  * Fix CVE-2022-44617: Runaway loop with width of 0 and enormous height
  * test: add test cases for CVE-2022-44617 (zero-width w/enormous height)
  * Fix CVE-2022-46285: Infinite loop on unclosed comments
  * test: add test case for CVE-2022-46285 (unclosed comments)
  * cxpm: getc/ungetc wrappers should not adjust position when c == EOF
  * test: Add unit tests using glib framework
  * configure: add --disable-open-zfile instead of requiring -DNO_ZPIPE
  * man pages: Apply standard man page style/formatting
  * man pages: Replace "See Also" entries with more useful ones
  * man pages: Fix typos and other minor editing
- drop U_0001-configure-add-disable-open-zfile-instead-of-requirin.patch,
      U_0002-Fix-CVE-2022-46285-Infinite-loop-on-unclosed-comment.patch,
      U_0004-Fix-CVE-2022-44617-Runaway-loop-with-width-of-0-and-.patch,
      U_0005-Fix-CVE-2022-4883-compression-commands-depend-on-PAT.patch,
      U_regression-bug1207029_1207030_1207031.patch
      U_regression2-bug1207029_1207030_1207031.patch: upstream
- switch urls to https
- spec file cleanups

OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=20
 2023-04-03 20:33:37 +00:00
Stefan Dirsch
1510a4ef3e - U_0001-configure-add-disable-open-zfile-instead-of-requirin.patch 
* needed by U_0005-Fix-CVE-2022-4883-compression-commands-depend-on-PAT.patch
- U_0002-Fix-CVE-2022-46285-Infinite-loop-on-unclosed-comment.patch
  * libXpm: Infinite loop on unclosed comments (CVE-2022-46285, 
    bsc#1207029)
- U_0004-Fix-CVE-2022-44617-Runaway-loop-with-width-of-0-and-.patch
  * libXpm: Runaway loop on width of 0 and enormous height 
    (CVE-2022-44617, bsc#1207030)
- U_0005-Fix-CVE-2022-4883-compression-commands-depend-on-PAT.patch
  * libXpm: compression commands depend on $PATH (CVE-2022-4883,
    bsc#1207031)
- U_regression-bug1207029_1207030_1207031.patch
  * regression fix for above patches
- U_regression2-bug1207029_1207030_1207031.patch
  * second regression fix: Use gzip -d instead of gunzip

OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=18
 2023-01-17 18:14:18 +00:00
Stefan Dirsch
f13b03a92e - Update to version 3.5.14 
* Fix spelling/wording issues
  * man: strip trailing whitespace
  * gitlab CI: add a basic build test
  * man pages: Make file names consistent with their displayed names
  * man pages: Fix shadow man pages
  * man pages: Make function synopses more consistent with other pages
  * man pages: Add missing word 'function' where needed
  * man pages: Fix typos
  * man pages: Correct Copyright/License notices
  * add man pages based on doc/xpm.PS
  * update man pages

OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=16
 2022-11-20 22:57:20 +00:00
Stefan Dirsch
812922f897 - Update to version 3.5.13 
The fixes here are some found by static analysers, and a build
  fix for Windows (which, curiously, is dated to 2012 so clearly
  we're at the top of the game here). Nothing overly exciting,
  but covscan, parfait, etc. should be a bit happier now.

OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=14
 2020-01-04 22:49:01 +00:00
Stefan Dirsch
d5165a9d05 - added baselibs.conf as source in specfile 
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=12
 2017-01-01 21:34:14 +00:00
Stefan Dirsch
934f302f0f - Update to version 3.5.12: 
* Fix abs() usage.
  * Fix out out boundary read on unknown colors
  * Gracefully handle EOF while parsing files.
  * Avoid OOB write when handling malicious XPM files.
  * Handle size_t in file/buffer length

OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=11
 2017-01-01 20:50:29 +00:00
Stefan Dirsch
5ff37cbf37 Accepting request 198755 from home:Zaitor:branches:X11:XOrg 
Update to ver 3.5.11

OBS-URL: https://build.opensuse.org/request/show/198755
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=8
 2013-09-13 10:17:36 +00:00
Stefan Dirsch
200751f56b OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=6 2013-03-19 19:47:42 +00:00
Stefan Dirsch
85efd263ca Accepting request 113253 from home:vuntz:branches:X11:XOrg 
Update to 3.5.10

OBS-URL: https://build.opensuse.org/request/show/113253
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=4
 2012-04-12 10:44:55 +00:00
Stefan Dirsch
5996a5f6d0 Accepting request 104229 from home:jengelh:branches:X11:XOrg 
Replaces xorg-x11-libXpm

OBS-URL: https://build.opensuse.org/request/show/104229
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libXpm?expand=0&rev=1
 2012-02-13 10:07:46 +00:00