Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

libXpm4-32bit-3.5.17-1.3 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

Name: libXpm4-32bit Distribution: openSUSE Tumbleweed
Version: 3.5.17 Vendor: openSUSE
Release: 1.3 Build date: Tue Oct 3 22:43:14 2023
Group: System/Libraries Build host: reproducible
Size: 87456 Source RPM: libXpm-3.5.17-1.3.src.rpm
Packager: https://bugs.opensuse.org
Url: https://xorg.freedesktop.org/
Summary: X Pixmap image file format library
libXpm facilitates working with XPM (X PixMap), a format for
storing/retrieving X pixmaps to/from files.

Provides

Requires

License

MIT

Changelog

* Tue Oct 03 2023 Stefan Dirsch <sndirsch@suse.com>
  - Update to 3.5.17
    * This release contains fixes for the libXpm issues reported in
      security advisory here:
      https://lists.x.org/archives/xorg-announce/2023-October/003424.html
    * fixes CVE-2023-43788 libXpm: out of bounds read in
      XpmCreateXpmImageFromBuffer() (boo#1215686)
    * fixes CVE-2023-43789 libXpm: out of bounds read on XPM with
      corrupted colormap (boo#1215687)
* Tue Apr 18 2023 Stefan Dirsch <sndirsch@suse.com>
  - update to 3.5.16:
    * test: skip compressed file tests when --disable-open-zfile is used
    * gitlab CI: build with each of --enable-open-zfile & --disable-open-zfile
    * configure: correct error message to suggest --disable-open-zfile
    * open-zfile: Make compress & uncompress commands optional
    * Require LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
    * XpmCreateDataFromXpmImage: Fix misleading indentation
    * parse.c: Wrap FREE_CIDX definition in do { ... } while(0)
    * parse.c: remove unused function xstrlcpy()
    * test: Use PACKAGE_BUGREPORT instead of hard-coded URL's
    * test: Add simple test cases for functions in src/rgb.c
    * xpmReadRgbNames: constify filename argument
    * Fix a memleak in ParsePixels error code path
* Thu Apr 13 2023 Stefan Dirsch <sndirsch@suse.com>
  - with switching to suggests making use of (n)compress no longer
    needs to be limited to openSUSE
* Thu Apr 13 2023 Stefan Dirsch <sndirsch@suse.com>
  - suggests instead of require compress (see changelog below)
* Wed Apr 12 2023 Stefan Dirsch <sndirsch@suse.com>
  - require compress (ncompress package) on openSUSE; it's not
    supported on SLE
* Wed Apr 12 2023 Fabian Vogt <fvogt@suse.com>
  - Drop n_no-compress-on-sle.patch and set XPM_PATH_COMPRESS instead
    (xpmPipeThrough function returns NULL when the command is not
    available; so same result as with the patch applied; that the
    child process for executing 'compress' returns with exit(1)
    doesn't matter much; it might even be useful to see the error
    message ...)
* Wed Apr 12 2023 Stefan Dirsch <sndirsch@suse.com>
  - Depend also on /usr/bin/uncompress, not only /usr/bin/gzip;
    Requiring binaries instead of packages resolves the file
    conflict with busybox-gzip, which is used when building nginx
    opensuse images; dep chain was: nginx -> libdg3 -> libXpm4 -> gzip
    ==> conflict with busybox-gzip
* Tue Apr 11 2023 Fabian Vogt <fvogt@suse.com>
  - Depend on /usr/bin/gzip, not gzip
* Mon Apr 03 2023 Stefan Dirsch <sndirsch@suse.com>
  - n_no-compress-on-sle.patch
    * we can't handle .Z files, since we don't have ncompress package
      on SLE; so disable this feature as before (bsc#1207031)
  - BuildRequires
    * removed again ncompress
    * added again autoconf, automake, libtool
  - run again autoreconf due to patch above
* Mon Apr 03 2023 Dirk Müller <dmueller@suse.com>
  - update to 3.5.15:
    * Use gzip -d instead of gunzip
    * Prevent a double free in the error code path
    * Fix CVE-2022-4883: compression commands depend on $PATH
    * Fix CVE-2022-44617: Runaway loop with width of 0 and enormous height
    * test: add test cases for CVE-2022-44617 (zero-width w/enormous height)
    * Fix CVE-2022-46285: Infinite loop on unclosed comments
    * test: add test case for CVE-2022-46285 (unclosed comments)
    * cxpm: getc/ungetc wrappers should not adjust position when c == EOF
    * test: Add unit tests using glib framework
    * configure: add --disable-open-zfile instead of requiring -DNO_ZPIPE
    * man pages: Apply standard man page style/formatting
    * man pages: Replace "See Also" entries with more useful ones
    * man pages: Fix typos and other minor editing
  - drop U_0001-configure-add-disable-open-zfile-instead-of-requirin.patch,
      U_0002-Fix-CVE-2022-46285-Infinite-loop-on-unclosed-comment.patch,
      U_0004-Fix-CVE-2022-44617-Runaway-loop-with-width-of-0-and-.patch,
      U_0005-Fix-CVE-2022-4883-compression-commands-depend-on-PAT.patch,
      U_regression-bug1207029_1207030_1207031.patch
      U_regression2-bug1207029_1207030_1207031.patch: upstream
  - switch urls to https
  - spec file cleanups
  - add gpg keyring validation
* Wed Jan 11 2023 Stefan Dirsch <sndirsch@suse.com>
  - U_0001-configure-add-disable-open-zfile-instead-of-requirin.patch
    * needed by U_0005-Fix-CVE-2022-4883-compression-commands-depend-on-PAT.patch
  - U_0002-Fix-CVE-2022-46285-Infinite-loop-on-unclosed-comment.patch
    * libXpm: Infinite loop on unclosed comments (CVE-2022-46285,
      bsc#1207029)
  - U_0004-Fix-CVE-2022-44617-Runaway-loop-with-width-of-0-and-.patch
    * libXpm: Runaway loop on width of 0 and enormous height
      (CVE-2022-44617, bsc#1207030)
  - U_0005-Fix-CVE-2022-4883-compression-commands-depend-on-PAT.patch
    * libXpm: compression commands depend on $PATH (CVE-2022-4883,
      bsc#1207031)
  - U_regression-bug1207029_1207030_1207031.patch
    * regression fix for above patches
  - U_regression2-bug1207029_1207030_1207031.patch
    * second regression fix: Use gzip -d instead of gunzip
* Sun Nov 20 2022 Stefan Dirsch <sndirsch@suse.com>
  - Update to version 3.5.14
    * Fix spelling/wording issues
    * man: strip trailing whitespace
    * gitlab CI: add a basic build test
    * man pages: Make file names consistent with their displayed names
    * man pages: Fix shadow man pages
    * man pages: Make function synopses more consistent with other pages
    * man pages: Add missing word 'function' where needed
    * man pages: Fix typos
    * man pages: Correct Copyright/License notices
    * add man pages based on doc/xpm.PS
    * update man pages

Files

/usr/lib/libXpm.so.4
/usr/lib/libXpm.so.4.11.0


Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Nov 9 00:55:10 2024