Hello community,
here is the log from the commit of package lcms for openSUSE:Factory
checked in at Sat Sep 5 01:18:14 CEST 2009.
--------
--- lcms/lcms.changes 2009-04-06 13:53:57.000000000 +0200
+++ lcms/lcms.changes 2009-07-14 18:51:00.000000000 +0200
@@ -1,0 +2,11 @@
+Tue Jul 14 18:21:49 CEST 2009 - sbrabec@suse.cz
+
+- Fix of incorrect GrayTRC (CVE-2009-0793) fix (bnc#521513).
+
+-------------------------------------------------------------------
+Thu Jul 9 18:53:12 CEST 2009 - sbrabec@suse.cz
+
+- Updated to fixed version 1.18a:
+ * Don't crash on missing GrayTRC.
+
+-------------------------------------------------------------------
calling whatdependson for head-i586
Old:
----
lcms-1.18.tar.bz2
New:
----
lcms-1.18a.tar.bz2
lcms-bnc521513.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ lcms.spec ++++++
--- /var/tmp/diff_new_pack.YlG30P/_old 2009-09-05 01:08:38.000000000 +0200
+++ /var/tmp/diff_new_pack.YlG30P/_new 2009-09-05 01:08:38.000000000 +0200
@@ -1,5 +1,5 @@
#
-# spec file for package lcms (Version 1.18)
+# spec file for package lcms (Version 1.18a)
#
# Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
@@ -20,17 +20,19 @@
Name: lcms
BuildRequires: gcc-c++ libtiff-devel python-devel swig
-License: X11/MIT
+License: MIT License (or similar)
Group: Productivity/Graphics/Other
Summary: Utilities for the Little CMS Engine
Url: http://www.littlecms.com/
-Version: 1.18
+Version: 1.18a
Release: 1
BuildRoot: %{_tmppath}/%{name}-%{version}-build
Source0: %{name}-%{version}.tar.bz2
Patch: lcms-endian.patch
Patch1: lcms-strict-aliasing.patch
Patch2: lcms-implicit-declaration.patch
+# PATCH-FIX-SECURITY lcms-bnc521513.patch sbrabec@suse.cz -- Fix of incorrect CVE-2009-0793 security fix.
+Patch3: lcms-bnc521513.patch
# bug437293
%ifarch ppc64
Obsoletes: liblcms-64bit
@@ -50,7 +52,7 @@
Marti Maria