From mboxrd@z Thu Jan  1 00:00:00 1970
Return-path: <ptxdist-bounces@pengutronix.de>
Received: from ptx.hi.pengutronix.de ([2001:6f8:1178:2:5054:ff:fec0:8e10]
	ident=Debian-exim) by metis.ext.pengutronix.de with esmtp (Exim 4.72)
	(envelope-from <mol@pengutronix.de>) id 1TMZpd-0000sN-72
	for ptxdist@pengutronix.de; Fri, 12 Oct 2012 09:38:53 +0200
Received: from mol by ptx.hi.pengutronix.de with local (Exim 4.72)
	(envelope-from <mol@pengutronix.de>) id 1TMZpd-0004Js-5u
	for ptxdist@pengutronix.de; Fri, 12 Oct 2012 09:38:53 +0200
Date: Fri, 12 Oct 2012 09:38:53 +0200
From: Michael Olbrich <m.olbrich@pengutronix.de>
Message-ID: <20121012073853.GE10236@pengutronix.de>
References: <1349188823-10712-1-git-send-email-george.mccollister@gmail.com>
	<1349188823-10712-2-git-send-email-george.mccollister@gmail.com>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <1349188823-10712-2-git-send-email-george.mccollister@gmail.com>
Subject: Re: [ptxdist] [PATCH 2/2] libpng: bump to 1.2.50
Reply-To: ptxdist@pengutronix.de
List-Id: PTXdist Development Mailing List <ptxdist.pengutronix.de>
List-Unsubscribe: <http://metis.pengutronix.de/cgi-bin/mailman/options/ptxdist>, 
	<mailto:ptxdist-request@pengutronix.de?subject=unsubscribe>
List-Archive: <http://metis.pengutronix.de/pipermail/ptxdist>
List-Post: <mailto:ptxdist@pengutronix.de>
List-Help: <mailto:ptxdist-request@pengutronix.de?subject=help>
List-Subscribe: <http://metis.pengutronix.de/cgi-bin/mailman/listinfo/ptxdist>, 
	<mailto:ptxdist-request@pengutronix.de?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: ptxdist-bounces@pengutronix.de
Errors-To: ptxdist-bounces@pengutronix.de
To: ptxdist@pengutronix.de

On Tue, Oct 02, 2012 at 09:40:23AM -0500, George McCollister wrote:
> Bumping to the newest 1.2.x.
> 
> Upstream fixed multiple CVEs since 1.2.44.
> 
> CVE-2012-3386
> CVE-2011-3048
> CVE-2011-3026
> 
> See CHANGES for full list of changes.
> 
> Signed-off-by: George McCollister <george.mccollister@gmail.com>
> ---

Thanks, both applied.

Btw, you forgot to update the patches. Next time please check if the old
version had some patches.

Michael

>  rules/libpng.make | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/rules/libpng.make b/rules/libpng.make
> index b591ffd..fc557f4 100644
> --- a/rules/libpng.make
> +++ b/rules/libpng.make
> @@ -18,8 +18,8 @@ PACKAGES-$(PTXCONF_LIBPNG) += libpng
>  #
>  # Paths and names
>  #
> -LIBPNG_VERSION	:= 1.2.44
> -LIBPNG_MD5	:= 098ab673ab74015978db98667febc4a9
> +LIBPNG_VERSION	:= 1.2.50
> +LIBPNG_MD5	:= a3e00fccbfe356174ab515b5c00641c7
>  LIBPNG		:= libpng-$(LIBPNG_VERSION)
>  LIBPNG_SUFFIX	:= tar.xz
>  LIBPNG_URL	:= $(call ptx/mirror, SF, libpng/$(LIBPNG).$(LIBPNG_SUFFIX))
> -- 
> 1.7.11.2
> 
> 
> -- 
> ptxdist mailing list
> ptxdist@pengutronix.de
> 

-- 
Pengutronix e.K.                           |                             |
Industrial Linux Solutions                 | http://www.pengutronix.de/  |
Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

-- 
ptxdist mailing list
ptxdist@pengutronix.de