From 98a9ad08e7f06c9e788148571965632faf2b6125 Mon Sep 17 00:00:00 2001 From: jxy_git Date: Thu, 13 Jul 2023 14:39:59 +0800 Subject: [PATCH] Update package to version 1.6.40 --- CVE-2019-6129.patch | 23 ----------------------- libpng-1.6.38.tar.gz | Bin 1523840 -> 0 bytes libpng-1.6.40.tar.gz | Bin 0 -> 1520834 bytes libpng.spec | 8 +++++--- 4 files changed, 5 insertions(+), 26 deletions(-) delete mode 100644 CVE-2019-6129.patch delete mode 100644 libpng-1.6.38.tar.gz create mode 100644 libpng-1.6.40.tar.gz diff --git a/CVE-2019-6129.patch b/CVE-2019-6129.patch deleted file mode 100644 index 04179b1..0000000 --- a/CVE-2019-6129.patch +++ /dev/null @@ -1,23 +0,0 @@ -From a0ca4293454ef65e67efca5dc440c601d2835e90 Mon Sep 17 00:00:00 2001 -From: tangyaofang -Date: Mon, 10 Jun 2019 11:30:15 +0800 -Subject: [PATCH] Repair of CVE-2019-6129 - ---- - contrib/tools/pngcp.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/contrib/tools/pngcp.c b/contrib/tools/pngcp.c -index 16d4e7f4d..a02d5b7ff 100644 ---- a/contrib/tools/pngcp.c -+++ b/contrib/tools/pngcp.c -@@ -506,7 +506,7 @@ static void - display_clean_read(struct display *dp) - { - if (dp->read_pp != NULL) -- png_destroy_read_struct(&dp->read_pp, NULL, NULL); -+ png_destroy_read_struct(&dp->read_pp, (dp->ip!=NULL ? &dp->ip : NULL), NULL); - - if (dp->fp != NULL) - { - diff --git a/libpng-1.6.38.tar.gz b/libpng-1.6.38.tar.gz deleted file mode 100644 index 33ded2a77048d8db6f5b5c203a84aeb3fcec278e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1523840 zcmV(xKyQ1W9C48*x%o~UH{>EP5*bc_j=#${W0j&ufMqd*ZJS(aeOIODrv96 z;KAlF_J8*_{_pPZ?yU2FZ*K?sKNtpgTz_%?Uy4La6+L4p0avYm&oUW!|8bmI!XtMf z^fQMsapj6Q#V5vEY|DtuyX{uz1KjpMY&nh$xi7Foi@lXP;{h9|nI{$NZg;zmqZd2~ z)N<+uDiY6FnqEnSc)0-A{8w8%EDpe}bUx3BUFg_QPK=|BUeE}Lb0I)bXG6K~P0wcDM<(xGh6#ySK z4h|ZY?+rG1_MVpV{?d&vd~F&OKN=sj4$Vt3VEW?dczCdegmx1dr}{n312j!VXg{?{ zu0CN|wW(hYPlu!aM9vJIaAj=m9Tu^E_m+YHn5@jte-p_ob^<--G7xvjWo?2Schoim`Mf`Q zh0=oEdb{sK8Tred?)#aH{`m;MJ^D<@Mh$O=4ZoiOJ74?YAXmfQZp-4>@?F;gsFCRT zo1^2y>5Jq3OVEy1%oETw5wPxBUo_zN_9B3`({F3vj)yP%gI}l%s@(X%D%nv(w$b7XNSWb-u;_U*Y^I@2jGPLz>OjGrZuEcl8+JOD(S=Bu%F;M1`--a=?lQQ5d&pz# zILK%7RuK=S%Rn#_o=AgI5a4|UZ8(#nTl6R%=%D$n5&|>^fL(AAeUl1@)#Lt$Ock5=WeQ< zwkKk}1wS$YOvBj89kOG_wio$Bp#1z1*OY0;>Zob7Z@`882~#-x-09VOb$YfRS_TIi z;1N5t-?@tq)pu_mRbPQ$)z>%?_zFLBc?Fo#3R;VfgHu!Ik`y3BX=UArI1FmZ^ol^b zG2WpCe<*Fl2aTifA^**yi%2aAr%N74&q-w{-~}6CzBWFVa}JIwGs5SsZzal4z1Hl1 zn(#}hAGG>&ul?_K_OI7}I{V#k_WvtfpI7GzIH)F;dYJ1tN}IrAo(M719z6##%C6{1 z=_?3NjIB*fM;C|F6U4hz05a`mlypFmUZrqy(7CloCADp|4$n_tPG9v$hd=d4!|B=i z&S>%C9i-gyBfN5U5_#N{ULFJu`uJsz6 zoxV7F`DT>o8;w>=MCis^3!ZpOo`{x;!CuOb+bKU^WllpVOnSk_8{L3!)P{%3D zfHHD}%oDjdg0zuLnMzI}SPUe|G@&@%!ND>g{@GQYFyg*GK`F}hNqjrY?P!oh+Zs(R zErVD`CATDYq{q- zj2p94OiOAMXm7a^{!RZ@G6%Ak$KQPP|AnjW|NEz>XKzji!-t*YKL5YHcYXh#ejgT% zo3FpP|2O<+hX0_gV~7AmID?$6v%6`wZw~Ig9A~nSn!!KL;%pW`9+rqea4ndcGc&~| zRkgv=dkl;u%QP0ZS)3>@b17>=tK4=R=LIHRj9+pYpckUv9^?Xn;-1sG<8qv_$`V(Y zw2dugx?smIFeDM+96SkW25TZTEQoF$W2Cb2%yHNctfmBQkcalwN7g+4^`zfI3y)4p zc$nJ~BY+r^gErts z!~WsPupN5%a(pxxo{sZ3FvG9TMq~R1CjD@D(jUFXcgGnlAVvekHMn2F05-5lTuPPc zb2xGLY$tNnnM# zq>q4-n?^KpCnnz@%@lr3U-1OL9nKQz@}jWo@?A@Bfbh%M2_#J4A4WrRYAbP)L}~?q6oS~ zSnh6}i$$VUL?062vyl>knrnK`Ru-bW;6cP`^p89QaKB{qtQHY_u9ks8@HKc)cu%-1 zR``Cx{Rn*2D;0!3(8)9bt_d6S1=nf9XPM_Mg#Dn|C<_7~vT@UprqC}DDNTDKA<+%L2qSlpc-vZwW4*{kl+u>X?V@d8QX42<&SHDdtZ=9LYmk z?N|cITIUj6D&*7LlLAXT5IM+@{UrRztZ|}3cFZG@KTmjMzr2MZFb7XA)Fr+nY!QN| zj);Ep0vmr_$loN&3zdj~%Snjzp>WBe%zGqVEJy(GWu%4Wp;A7Ch)0pzHl1q3p@s^1 z@cj^GeIZ5QnO9h@1V&{SkOZeF(85;k!Qtcf21sUFwAnz!G*O+qXhDHh7>PM1?z3@6 z!C55Q^#7escV~O=+WFtz?Y*6E{{Jgn zmg88Rx0xS$Vj~rflc#vw?GAef9@Sm2?$b@ydHQtk1C?lHD#6_>RdUgiQ48#xk2z~@ zovHx3>|H-jWWYM*cupx_Li@{@GEvIYUci?*C38BYEGtnna2RC7behe`E>%JAWy3WxZYY`Z=2g%Dpf=?DW_SmK$<+AtP8=g;6oF&83yjB^rmosK(yQ*b3;{2o_1XU{# zTM|EuE#M4w&hgX&n~9Vcs$J2OX}}X- zOi@{t+uSJFY?^UTrMXe-ujNNEP3t5lrO5YF*pera4gD&^z*47ET@MzHV&-rp>WrRnZ=U_xd8_rgbMTwBZpNA{?&hsdmnS2lwv8j)TYs2 zqbQ&}kZv(Z&x099r=7F^hPa^F>9xRlZ?awdF&-d54*(ETw_TBaGR#R9u{`#Ymm>FE z%^4(KpbBVXaOa@9X0Y);qN-p52utpLD6p{h!PdOJdIh@%WB*ndHHsA$7rz(-YlEMZ zc7KpomJdiLM6OsLkpv4F$sKq+xfPEpQ7jsXh>4Qq^^C9@k61UA_1TJW%QDYISV-nA z3Jr|cH9l+0*zA(MRaBo^Z?IQlYW6)aUbNw~J!rxD=SRk(T@<-JY3&TvHL<8KfW=rV zo0-3}Sqc`ZrOC)C(xNcT=&w=H=Ei3A3!z_rA|RE|WSr{*J&>kEt=3`k$SVftUFyJV zAqQA5Ezr~g@sO%$^=Q0_B8nKoczf~=o9phPa6on<(+W@q*3{NHa$WO~ydWqj8eq>- ztY(G+>uoEnjlrcCDhoW?tVE1&VUnEV0H8hC3KL~vXBCtLLDLHXspc3DML-H#vcaF~ zD|P^Ziy)3r=vBd0;0BGsM467UP~i8e9>ei$PBDB%(KD{d*f?yHN$!zyid^$pR>t(JOUzsaisF{=;d>pDS%!Ys@J_*0ovzb$ju4e0yryo;YhF7#%==f zOT92%r?wAPzay0r?WwjEVET*Fz$x`Ga0y)kQ8@p6e3K*xqOXE|HhRKB`gCwM8Vv`N z>3RQnIGGHm<2UE$XQRpRkbqTvJvwBN!${4Pw?cu{B+r|SQot1!?|2*wp5&##d4}G) zT@VI!fK1AB1+E5&(%XHV`z%sPBk#?A0I?^P@Q%d-qOEA720})qw<@#4<~RgZ*D#9v z;KPm(x9DP{uzuubt(Ia&D{VlWCo+hSjlnRYM5h7M(8=H;Z68~6VhRdn+E!8bT!~0s zmI?)U1`Y`zF5wbm?taWeVT6fafFa61LI=FsC+a+b+r`vTWxsP2> zFl8Q$26nf6E6=(x26Sqiita$ ztyt4$cr7dwY+y>y!OT<))Zy9Klzp~pF@zOFTmAr9r&58Lqto8rWz8~bEXAtOw!uIC z0X#zmNazm*>{fnWaAHln8Fa|A7$lP*kgdVpEEF*8Ix~Tlkq8P*KoT$%2UACVwDcoR zF)%Wk2iV*E>FG=e6IGjpk+u|sFQX_wlYs6pg$`kxu^-@~oi#q6e333Th1_aoEkppd& z9)KhPHuzZg3$ZmxsV!u!jGJqrm4dv{_&6(M#ODG7l!*z5AWZEGQyf~ElT7AM6p@0-zBG4{){>M8W>pFu#ysG@k5N8ZDq$&-n^Ak{w9qFPe4vM!YKZb;BSWvArZLSrWHmgA+1(5|0>ZWkd*0M`O zSo2?4ngenKSgEs)4@lI=;%TCm4VEsYYXbfTzw}L8go)rfoWgdLb^)y)@L5|Mg7qx+ zUk7ZvVgQTsgDHA~K(Ezk+U>S^f`^Tw05zShQo~?dC&@tTraRrj7LqSQc|GY5z{Wx^ z5$P-sAju7ab}qme;?m|ZJ|u#IoA2#WY_Ig!bO@@lRbcI7@i${=|MCNF?C|&);s(2I z|2m6to3k|1jTjTEB?kehR}D6SN)pUPzA=Gfi3jL#V_9Q>X#+hM9Cs@Q%0sHTLL1nu z?zdMa!tKj=%7b{pZ=1_htIS-~k!FuXkWVKgEWp@O3C2sHIW{7NNULdLK^JXJB0v_XcpnanlvwBKnqq1_$t8yJm{Ml8dLXAyV|I6IJ zHl~qfX`=9V|B7g;P8qoX33RcX?yPAnVOy2DjgZsMs;R>XK_EpM2#Ns9%C0`Y{p@w! zYwrl0Sv@`dzBApO76cJH_GMk4^(^<9`^Y$ja3D|+g4(93zAFo7uM-$Gy@NIHB~MP# zkeX_Oj*Ua9vKTw@sX^uC7O8vG#)0rGfLT zyyV!ucK70Eg7g>yqSS74+ftbnlnaH&`6Kus@@kl$q0n~uIuCord(_s7R4Vp zLGTTh9NY|s!?UZ)(f{}#|D)~>sM0l5GJy)td$g~p_>}ex?)r2sk}BbJmFyLG9zbVD zgUi#=#ntJ6LCTfTnssPkLNCCBnPeV}8QE#o5Wb{3@t3eyR-3Wpi-J@mUO>kLbuq{D zSXE&HVT`W;3y$|)jqfP62_gJ!Eung}4JD@XuXx8lg~1TsWwMp|8fTM!G;t;LYRhGT zSZ2KT-d~Hq_xGeR-oqHgaxze5@)q4BE!Qje5QdW#u#qU-fD&*CLW{0f>sj%&#p>P} z795OWWohOe@6tpWj9WylUl$b2va7UL(pQAKvqFXA|4cwH+wPs?9sMRNJHnfV_z(B5qX(E)sUvbM7onwSf>-0!c$AL)wuN)aW@V5L)*1D$;U=Wv z6eP@SgChRkej?bTfBBoYCrP(^*h~Ie=HtJC;I%3=Fi0u(WwG#-UU1Ih6Tk*Dy=gD} zJpN^qk&^A}D1@W0&`FLC5BHDGS(UhzGdAfCeJ5`g-0T8l{RS2vN=|(o3;Plxf4WbD zI}Oq@M?{*FQxv1&U4gnT>)dxJ+HJyZAo+Jc-kjYIMweH&qqoiy`pL)KUgPEHk($C_fFoLBC zzK@F0_MhNDqN zAmt{Bfkh#|#;~=Dz%`zpWeQ~rxC)n7qv7r8*_D-0x1{neuTIZ?)b+-!8icSQ9?f=& z{H7{W+4gSF8@y!rd-p)BvOFEU`S5OZF}S$8`H9abdQ43NQobhISr z$F(|`md8?=`%PX#(0KhQ{(&8DEBTUVk2#n{^e5alc*l-;hZF&74421eIDwAxT-*fw zySGme2L9FhfebY`F1KeFgAxD83o9~=;U?iVz5O7G(AN}y4iUZei2Y4fZFVu+ZFlsX zF<0Vr-#xjNT_it3Mrg4Pd_?C_jj-Bp9mXeMIPP;JVMI-1a@OwQSGtD<3x(VGZB^D; zr`PR;QRQ3QJnjOJmC;_LU7cdS%~>gA(VBpSj|ic>GRhhc5x^E0TsF?LGBmj;UAJ=n zGUHxY_u!e<)kA0FUH{^uZ`O_l6MYGlYUVpFmJf$Q=UF8prP(QQ?%sX1f|bD%GR@23 zkr%UK=YQ{5?eVd4=PQ>)*Va>I_HlGq)aK^C2Zy>vQxTL9Y_~2;ItH;5copg;fYelA zih4HSt>8mO4;VavL~>+_w4#mvX65$Rb+%sTYp+Uf`#0|fwHj zLg<}(>!N@DvH#O>H28EoxVa>yIT~Gj9Nhdc9F3Ac{2}>xcDdgpsJ$++w{XF-UbDd< zo}5DNG}?}d<|uXjQHt(Nn};;=LsrrXkaTjhCt(r#!>z`bbhgPlL?JP~YUQQ`N8PR%JwWM^3L3d3%bF%evYp`! zS8~>Mr=!C`7lz>+#Un-0oVCB2&WgttYQt1wI~d;r(*|?AfI>>#W1OLkaS(C8l?ox7 zO$EMzf6o?QL;n)8cREim{XAWWB`qu7@jeK+Gm8xTPZ=Zyc1iLeKCcsqbqXP6lac#w zynHgTFZ+%2R}fC&OtvRDIdjxLJRkmsA1=>6F~ZL66gZ`Pu=kUuhj8Usgdzu?9*EJ7 z!|44d=KZ@}>u}LjHm2!nv@S-F(P{29D9jjshF5>dOHFNc06QrUfhlgtdxF`QNnNpp zFK|*8s;hCP1s~+50c8fE_;h|uxhfayW!eN^@sdf*Tyqn9R8f)%^FF3`O zyEk`wgkuxe=eGl@Bu?qT8N+euh6=0ei>qbQcLNvggxoh2+ic4ESp@M5Lvb@GF?X1Z zY~ocLc?Suot*3CyWM<3sj*WS%PmCUs-lzG3*Cdc`7+fG1Q4{-9ozWHp$Qu9nM?+9R z&be#+;SUYC*=?~IKhUIjMJHG-bh9A*r(p>26W!^WLAK!jffE_)oOKfAh}MvmbUq|t z5=IV{v3U>%$t()ZW z@PV*sWn4`si4^DWk?Gxz`~Nnf#hw(}v*@>7_lHA(PA+KwagOX4%=%7pJgp$O|Liti zdsetPe%ILv))+0GS#j^22)`A16098yb8+&pa<{!s0W((?i%3;XrL5(!ZZFvhUcxTH zsJ;#GeKC@zl6Ja4ku3_K6kv%j0gQ_9$lo}-9NzZN&uvJUDqg%?VU1FhJvsUApB;C2 zoITe`{^CT(tXMCecGw;iZl2y(x1Bo4FuN-Z_QvMt8;inO>4ltYMRTDKW;Ge!nK&kV zEYB$;pZ?A$pEcYYG+)0)yQD9(;oJl+ZBRHxu=#NAR=hP(wD}94 zd1M$Nj%W{inbMTH>%akLkB}y#S&}qo?098zNSRC^#j4QFhSPaYip~qCE}>Q#G;tVr zwA0|0F7JI_tlYcMaRW5#g7@{$%j~}WGU#{lnfBN(0lIp5Xg5I&>CM1P*&rwL>)Jr)7#!kxC*i3XR-=w6w~1I6ec zAOIn?dp;_q${(HCKblae2F-&yv`YNWKy=ZMm6e9mbbj^*{`2GDhDdKHT=@0r>6c$@ z@Z;;#FJw;u+6m%}EfN4Njz4+Xgm7g5d;Sqjt9^ z>X%?)Yp~B((=h~_qKUneiS6$Dnf;%TvB^v@2>vlkF&|FBhxKETWb@_v2@jYPoJFy$ z9`cGDw3^RI-{0j^cP@5+2UwD++uFEHDdFI-RxOAbg>Rr`u-${|#tk&Bhp3g=c(Z~~ znlnT`!$L8D8P>uHdqC=^>j&8Nbs-&wan zX{tq{#x?T@?&~yjPm;tx%8k1xuCBn>yDKYk2^t+(P;T4iV~}pk8Thgot%6le0;