From 5bed0d462ae943378c694b23139e934576aa5a7f Mon Sep 17 00:00:00 2001 From: maxice8 <30738253+maxice8@users.noreply.github.com> Date: Wed, 8 Nov 2017 14:22:40 -0200 Subject: [PATCH] lcms2: update to 2.9. (#8984) --- srcpkgs/lcms2/patches/CVE-2016-10165.patch | 22 ---------------------- srcpkgs/lcms2/template | 6 +++--- 2 files changed, 3 insertions(+), 25 deletions(-) delete mode 100644 srcpkgs/lcms2/patches/CVE-2016-10165.patch diff --git a/srcpkgs/lcms2/patches/CVE-2016-10165.patch b/srcpkgs/lcms2/patches/CVE-2016-10165.patch deleted file mode 100644 index 8323e744c4..0000000000 --- a/srcpkgs/lcms2/patches/CVE-2016-10165.patch +++ /dev/null @@ -1,22 +0,0 @@ -From 5ca71a7bc18b6897ab21d815d15e218e204581e2 Mon Sep 17 00:00:00 2001 -From: Marti -Date: Mon, 15 Aug 2016 23:31:39 +0200 -Subject: [PATCH] Added an extra check to MLU bounds - -Thanks to Ibrahim el-sayed for spotting the bug ---- - src/cmstypes.c | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/src/cmstypes.c b/src/cmstypes.c -index cb61860..c7328b9 100644 ---- src/cmstypes.c -+++ src/cmstypes.c -@@ -1460,6 +1460,7 @@ void *Type_MLU_Read(struct _cms_typehandler_struct* self, cmsIOHANDLER* io, cmsU - - // Check for overflow - if (Offset < (SizeOfHeader + 8)) goto Error; -+ if ((Offset + Len) > SizeOfTag + 8) goto Error; - - // True begin of the string - BeginOfThisString = Offset - SizeOfHeader - 8; diff --git a/srcpkgs/lcms2/template b/srcpkgs/lcms2/template index 843e2532ea..a8a44b66b3 100644 --- a/srcpkgs/lcms2/template +++ b/srcpkgs/lcms2/template @@ -1,7 +1,7 @@ # Template build file for 'lcms2'. pkgname=lcms2 -version=2.8 -revision=2 +version=2.9 +revision=1 build_style=gnu-configure makedepends="tiff-devel" short_desc="Small-footprint color management engine, version 2" @@ -9,7 +9,7 @@ maintainer="Juan RP " homepage="http://www.littlecms.com" license="MIT" distfiles="${SOURCEFORGE_SITE}/lcms/lcms2-$version.tar.gz" -checksum=66d02b229d2ea9474e62c2b6cd6720fde946155cd1d0d2bffdab829790a0fb22 +checksum=00756bed09ce059a68289f10de56b00267667647393ddc30400cb87c0d9037d5 lcms2-devel_package() { depends="${makedepends} ${sourcepkg}-${version}_${revision}"