Fixed heap overflow (CVE-2016-3074)
This commit is contained in:
parent
b15c4cf3c5
commit
8bd65163f5
11
gd.spec
11
gd.spec
@ -5,7 +5,7 @@
|
|||||||
Summary: A graphics library for quick creation of PNG or JPEG images
|
Summary: A graphics library for quick creation of PNG or JPEG images
|
||||||
Name: gd
|
Name: gd
|
||||||
Version: 2.1.1
|
Version: 2.1.1
|
||||||
Release: 4%{?prever}%{?short}%{?dist}
|
Release: 5%{?prever}%{?short}%{?dist}
|
||||||
Group: System Environment/Libraries
|
Group: System Environment/Libraries
|
||||||
License: MIT
|
License: MIT
|
||||||
URL: http://libgd.bitbucket.org/
|
URL: http://libgd.bitbucket.org/
|
||||||
@ -18,9 +18,12 @@ Source0: https://bitbucket.org/libgd/gd-libgd/downloads/libgd-%{version}%{
|
|||||||
%endif
|
%endif
|
||||||
# Missing in official archive, need for autoreconf
|
# Missing in official archive, need for autoreconf
|
||||||
Source2: getver.pl
|
Source2: getver.pl
|
||||||
|
# Test data for CVE-2016-3074 test
|
||||||
|
Source3: invalid_neg_size.gd2
|
||||||
|
|
||||||
Patch1: gd-2.1.0-multilib.patch
|
Patch1: gd-2.1.0-multilib.patch
|
||||||
Patch2: gd-2.1.1-libvpx.patch
|
Patch2: gd-2.1.1-libvpx.patch
|
||||||
|
Patch3: gd-heap-overflow.patch
|
||||||
|
|
||||||
BuildRequires: freetype-devel
|
BuildRequires: freetype-devel
|
||||||
BuildRequires: fontconfig-devel
|
BuildRequires: fontconfig-devel
|
||||||
@ -79,6 +82,7 @@ files for gd, a graphics library for creating PNG and JPEG graphics.
|
|||||||
%setup -q -n libgd-%{version}%{?prever:-%{prever}}
|
%setup -q -n libgd-%{version}%{?prever:-%{prever}}
|
||||||
%patch1 -p1 -b .mlib
|
%patch1 -p1 -b .mlib
|
||||||
%patch2 -p1 -b .vpx
|
%patch2 -p1 -b .vpx
|
||||||
|
%patch3 -p1
|
||||||
|
|
||||||
# Workaround for missing file
|
# Workaround for missing file
|
||||||
cp %{SOURCE2} config/getver.pl
|
cp %{SOURCE2} config/getver.pl
|
||||||
@ -117,6 +121,8 @@ rm -f $RPM_BUILD_ROOT/%{_libdir}/libgd.a
|
|||||||
|
|
||||||
|
|
||||||
%check
|
%check
|
||||||
|
cp %SOURCE3 tests/gd2/
|
||||||
|
|
||||||
: Upstream test suite
|
: Upstream test suite
|
||||||
make check
|
make check
|
||||||
|
|
||||||
@ -147,6 +153,9 @@ grep %{version} $RPM_BUILD_ROOT%{_libdir}/pkgconfig/gdlib.pc
|
|||||||
|
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Thu Apr 28 2016 Marek Skalicky <mskalick@redhat.com> - 2.1.1-5
|
||||||
|
- Fixed heap overflow (CVE-2016-3074)
|
||||||
|
|
||||||
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.1-4
|
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.1-4
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user