On Tue, Oct 02, 2012 at 09:40:23AM -0500, George McCollister wrote:
> Bumping to the newest 1.2.x.
> 
> Upstream fixed multiple CVEs since 1.2.44.
> 
> CVE-2012-3386
> CVE-2011-3048
> CVE-2011-3026
> 
> See CHANGES for full list of changes.
> 
> Signed-off-by: George McCollister <[email protected]>
> ---

Thanks, both applied.

Btw, you forgot to update the patches. Next time please check if the old
version had some patches.

Michael

>  rules/libpng.make | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/rules/libpng.make b/rules/libpng.make
> index b591ffd..fc557f4 100644
> --- a/rules/libpng.make
> +++ b/rules/libpng.make
> @@ -18,8 +18,8 @@ PACKAGES-$(PTXCONF_LIBPNG) += libpng
>  #
>  # Paths and names
>  #
> -LIBPNG_VERSION       := 1.2.44
> -LIBPNG_MD5   := 098ab673ab74015978db98667febc4a9
> +LIBPNG_VERSION       := 1.2.50
> +LIBPNG_MD5   := a3e00fccbfe356174ab515b5c00641c7
>  LIBPNG               := libpng-$(LIBPNG_VERSION)
>  LIBPNG_SUFFIX        := tar.xz
>  LIBPNG_URL   := $(call ptx/mirror, SF, libpng/$(LIBPNG).$(LIBPNG_SUFFIX))
> -- 
> 1.7.11.2
> 
> 
> -- 
> ptxdist mailing list
> [email protected]
> 

-- 
Pengutronix e.K.                           |                             |
Industrial Linux Solutions                 | http://www.pengutronix.de/  |
Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

-- 
ptxdist mailing list
[email protected]

Reply via email to