commit 7e90206622a72f4cc42e43809e6f201ee8d8aaaf Author: Fredrik Rinnestam <fredrik@crux.nu> Date: Fri Jul 19 13:59:00 2019 +0200 [notify] libpng: updated to 1.6.37. Fix for CVE-2019-7317 diff --git a/libpng/.footprint b/libpng/.footprint index 03335cd01..81a346d4d 100644 --- a/libpng/.footprint +++ b/libpng/.footprint @@ -18,9 +18,9 @@ lrwxrwxrwx root/root usr/lib/libpng.la -> libpng16.la lrwxrwxrwx root/root usr/lib/libpng.so -> libpng16.so -rw-r--r-- root/root usr/lib/libpng16.a -rwxr-xr-x root/root usr/lib/libpng16.la -lrwxrwxrwx root/root usr/lib/libpng16.so -> libpng16.so.16.36.0 -lrwxrwxrwx root/root usr/lib/libpng16.so.16 -> libpng16.so.16.36.0 --rwxr-xr-x root/root usr/lib/libpng16.so.16.36.0 +lrwxrwxrwx root/root usr/lib/libpng16.so -> libpng16.so.16.37.0 +lrwxrwxrwx root/root usr/lib/libpng16.so.16 -> libpng16.so.16.37.0 +-rwxr-xr-x root/root usr/lib/libpng16.so.16.37.0 drwxr-xr-x root/root usr/lib/pkgconfig/ lrwxrwxrwx root/root usr/lib/pkgconfig/libpng.pc -> libpng16.pc -rw-r--r-- root/root usr/lib/pkgconfig/libpng16.pc diff --git a/libpng/.signature b/libpng/.signature index a3823d0cf..b5df4f555 100644 --- a/libpng/.signature +++ b/libpng/.signature @@ -1,6 +1,6 @@ untrusted comment: verify with /etc/ports/opt.pub -RWSE3ohX2g5d/X1qGMrbMF5WbqnlEhoMdkqcD3as1DxJ5feo1QYEzu+1lyKrZ+q9hlTmXGoouhtR06xhc48Ra1c4Q+POVjef3Aw= -SHA256 (Pkgfile) = 1afa4c71129ede8df5e13e8aad2ac13ac572cd5d7521eea3b5b447cd71f665c1 -SHA256 (.footprint) = afac733e25683f986c603dd0f599668ca21197c1a92421c50b535e8f560d1a11 -SHA256 (libpng-1.6.36.tar.xz) = eceb924c1fa6b79172fdfd008d335f0e59172a86a66481e09d4089df872aa319 +RWSE3ohX2g5d/ZKAIbmKbeK7tk0dKUF56KOx+UpNCyqsOQuwmMMIqyHr/xBTC074br/t6KzveD+SdDbRoVIhsqjt0F/oz9BS6w0= +SHA256 (Pkgfile) = 7adba0dfb8963327ba8d6c00191bc5d0b63b44503e6c391db6ee78edbfebedde +SHA256 (.footprint) = cf6d989f95dd9dd8bf2d917195d3549fbcda2b58822d9035dbc1c6c1afb16975 +SHA256 (libpng-1.6.37.tar.xz) = 505e70834d35383537b6491e7ae8641f1a4bed1876dbfe361201fc80868d88ca SHA256 (libpng-apng.patch) = 2234b5138069824e30e84357a36bd725c2cb3fd589d5c2135ecbe60b0b4800d8 diff --git a/libpng/Pkgfile b/libpng/Pkgfile index 5032e82c0..705e95890 100644 --- a/libpng/Pkgfile +++ b/libpng/Pkgfile @@ -4,7 +4,7 @@ # Depends on: zlib name=libpng -version=1.6.36 +version=1.6.37 release=1 source=(http://download.sourceforge.net/$name/$name-$version.tar.xz \ $name-apng.patch)