[{"id":1762163,"web_url":"http://patchwork.ozlabs.org/comment/1762163/","msgid":"<20170902184428.74702a3b@windsurf.lan>","list_archive_url":null,"date":"2017-09-02T16:44:28","subject":"Re: [Buildroot] [PATCH 1/2] package/libpng: bump version to 1.6.32","submitter":{"id":2230,"url":"http://patchwork.ozlabs.org/api/people/2230/","name":"Thomas Petazzoni","email":"thomas.petazzoni@free-electrons.com"},"content":"Hello,\n\nOn Sat, 2 Sep 2017 16:29:55 +0200, Bernd Kuhls wrote:\n> Added md5 hash provided by upstream.\n> \n> Signed-off-by: Bernd Kuhls \n> ---\n> package/libpng/libpng.hash | 7 ++++---\n> package/libpng/libpng.mk | 2 +-\n> 2 files changed, 5 insertions(+), 4 deletions(-)\n\nApplied to master, thanks.\n\nThomas","headers":{"Return-Path":"","X-Original-To":["incoming@patchwork.ozlabs.org","buildroot@lists.busybox.net"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","buildroot@osuosl.org"],"Authentication-Results":"ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=busybox.net\n\t(client-ip=140.211.166.137; helo=fraxinus.osuosl.org;\n\tenvelope-from=buildroot-bounces@busybox.net;\n\treceiver=)","Received":["from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xl25H6Mjzz9sRW\n\tfor ;\n\tSun, 3 Sep 2017 02:44:35 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby fraxinus.osuosl.org (Postfix) with ESMTP id 077A9840C6;\n\tSat, 2 Sep 2017 16:44:33 +0000 (UTC)","from fraxinus.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id LKDvbQTeJ6c5; Sat, 2 Sep 2017 16:44:32 +0000 (UTC)","from ash.osuosl.org (ash.osuosl.org [140.211.166.34])\n\tby fraxinus.osuosl.org (Postfix) with ESMTP id 3940384CDF;\n\tSat, 2 Sep 2017 16:44:32 +0000 (UTC)","from silver.osuosl.org (smtp3.osuosl.org [140.211.166.136])\n\tby ash.osuosl.org (Postfix) with ESMTP id B94C31BFB70\n\tfor ;\n\tSat, 2 Sep 2017 16:44:30 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n\tby silver.osuosl.org (Postfix) with ESMTP id B4B8B2313D\n\tfor ;\n\tSat, 2 Sep 2017 16:44:30 +0000 (UTC)","from silver.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id F0zoN33MgK6I for ;\n\tSat, 2 Sep 2017 16:44:30 +0000 (UTC)","from mail.free-electrons.com (mail.free-electrons.com [62.4.15.54])\n\tby silver.osuosl.org (Postfix) with ESMTP id 029F822D1C\n\tfor ; Sat, 2 Sep 2017 16:44:29 +0000 (UTC)","by mail.free-electrons.com (Postfix, from userid 110)\n\tid 44A1420A4C; Sat, 2 Sep 2017 18:44:28 +0200 (CEST)","from windsurf.lan (LFbn-1-15133-129.w86-206.abo.wanadoo.fr\n\t[86.206.239.129])\n\tby mail.free-electrons.com (Postfix) with ESMTPSA id 1B1012097A;\n\tSat, 2 Sep 2017 18:44:28 +0200 (CEST)"],"X-Virus-Scanned":["amavisd-new at osuosl.org","amavisd-new at osuosl.org"],"X-Greylist":"domain auto-whitelisted by SQLgrey-1.7.6","Date":"Sat, 2 Sep 2017 18:44:28 +0200","From":"Thomas Petazzoni ","To":"Bernd Kuhls ","Message-ID":"<20170902184428.74702a3b@windsurf.lan>","In-Reply-To":"<20170902142956.22181-1-bernd.kuhls@t-online.de>","References":"<20170902142956.22181-1-bernd.kuhls@t-online.de>","Organization":"Free Electrons","X-Mailer":"Claws Mail 3.14.1 (GTK+ 2.24.31; x86_64-redhat-linux-gnu)","MIME-Version":"1.0","Cc":"buildroot@buildroot.org","Subject":"Re: [Buildroot] [PATCH 1/2] package/libpng: bump version to 1.6.32","X-BeenThere":"buildroot@busybox.net","X-Mailman-Version":"2.1.18-1","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n\t","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n\t","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@busybox.net","Sender":"\"buildroot\" "}},{"id":1764055,"web_url":"http://patchwork.ozlabs.org/comment/1764055/","msgid":"<87lglsdo8j.fsf@dell.be.48ers.dk>","list_archive_url":null,"date":"2017-09-06T12:07:40","subject":"Re: [Buildroot] [PATCH 1/2] package/libpng: bump version to 1.6.32","submitter":{"id":42365,"url":"http://patchwork.ozlabs.org/api/people/42365/","name":"Peter Korsgaard","email":"peter@korsgaard.com"},"content":">>>>> \"Bernd\" == Bernd Kuhls writes:\n\n > Added md5 hash provided by upstream.\n > Signed-off-by: Bernd Kuhls \n\nIt would have been good to mention that this fixes a security issue\nintroduced in 1.6.31, so a candidate for 2017.08.x:\n\nVulnerability Warning\n\nlibpng version 1.6.31 added png_handle_eXIf(), which has a\nnull-pointer-dereference bug as well as a potential memory leak. Insofar\nas the function has existed for only four weeks and the chunk itself for\nonly six, it's unlikely there are any applications affected by it at\nthis time, but they might come into existence in the future. The\nvulnerability is fixed in version 1.6.32, released on 24 August 2017.","headers":{"Return-Path":"","X-Original-To":["incoming@patchwork.ozlabs.org","buildroot@lists.busybox.net"],"Delivered-To":["patchwork-incoming@bilbo.ozlabs.org","buildroot@osuosl.org"],"Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=busybox.net\n\t(client-ip=140.211.166.133; helo=hemlock.osuosl.org;\n\tenvelope-from=buildroot-bounces@busybox.net;\n\treceiver=)","ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (2048-bit key;\n\tunprotected) header.d=gmail.com header.i=@gmail.com\n\theader.b=\"KmkDOfNt\"; dkim-atps=neutral"],"Received":["from hemlock.osuosl.org (smtp2.osuosl.org [140.211.166.133])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xnMmC0RkKz9sBZ\n\tfor ;\n\tWed, 6 Sep 2017 22:07:54 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby hemlock.osuosl.org (Postfix) with ESMTP id 71A86899E4;\n\tWed, 6 Sep 2017 12:07:49 +0000 (UTC)","from hemlock.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id VjuENsOMEdTo; Wed, 6 Sep 2017 12:07:47 +0000 (UTC)","from ash.osuosl.org (ash.osuosl.org [140.211.166.34])\n\tby hemlock.osuosl.org (Postfix) with ESMTP id A51D9893BE;\n\tWed, 6 Sep 2017 12:07:47 +0000 (UTC)","from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137])\n\tby ash.osuosl.org (Postfix) with ESMTP id A3F941C0378\n\tfor ;\n\tWed, 6 Sep 2017 12:07:46 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n\tby fraxinus.osuosl.org (Postfix) with ESMTP id 9BB2587277\n\tfor ;\n\tWed, 6 Sep 2017 12:07:46 +0000 (UTC)","from fraxinus.osuosl.org ([127.0.0.1])\n\tby localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id alP-HbmKJGht for ;\n\tWed, 6 Sep 2017 12:07:45 +0000 (UTC)","from mail-wm0-f45.google.com (mail-wm0-f45.google.com\n\t[74.125.82.45])\n\tby fraxinus.osuosl.org (Postfix) with ESMTPS id 241468723E\n\tfor ; Wed, 6 Sep 2017 12:07:45 +0000 (UTC)","by mail-wm0-f45.google.com with SMTP id 187so30163001wmn.1\n\tfor ; Wed, 06 Sep 2017 05:07:45 -0700 (PDT)","from dell.be.48ers.dk ([91.183.172.93])\n\tby smtp.gmail.com with ESMTPSA id\n\te34sm3586765wre.15.2017.09.06.05.07.41\n\t(version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256);\n\tWed, 06 Sep 2017 05:07:41 -0700 (PDT)","from peko by dell.be.48ers.dk with local (Exim 4.88)\n\t(envelope-from )\n\tid 1dpZ7M-0000Wr-74; Wed, 06 Sep 2017 14:07:40 +0200"],"X-Virus-Scanned":["amavisd-new at osuosl.org","amavisd-new at osuosl.org"],"X-Greylist":"domain auto-whitelisted by SQLgrey-1.7.6","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;\n\th=sender:from:to:cc:subject:references:date:in-reply-to:message-id\n\t:user-agent:mime-version;\n\tbh=LzhF89evlBRO/UMj7ZUBaWsoWU9buYW9wo0OsspXUr8=;\n\tb=KmkDOfNt+Vrl7OX/myHWCEznzNzmk6YmI2PoBllJbaMN9EDdzSDR0xyRk2aI5YgLps\n\tpilZ2NSroMB37Gh8wBUixV33jSde8kfxQRqk9x+nDchZLIt3D+YmLRsKEK/JjKllYTLo\n\trt04asy21BOnAG+dch5Hk/2OL2MuSDYygpDsuefvmpI+oOdXQj9OB68jDfdkrcK0+fi8\n\toLuWYf3LeeCRbp3pKVK7xyxrwYuNo8qbpk/EEO02LD2qcK5wml2n56x1uRJXXb48C3W1\n\tj1vgFpUJsWPnA0mfj0pi+uw3fO010bekt6+L48K6d2xdxLU5QyNWjCWHeB8vkvLDs7PR\n\ti+2A==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=1e100.net; s=20161025;\n\th=x-gm-message-state:sender:from:to:cc:subject:references:date\n\t:in-reply-to:message-id:user-agent:mime-version;\n\tbh=LzhF89evlBRO/UMj7ZUBaWsoWU9buYW9wo0OsspXUr8=;\n\tb=ft44xdInPl3KfmBaP2/ujT/lhxOXct8TaC6zgCN1CtSu9wO86X5+/l7ZsSw4PZIOI3\n\tHbk/yKTu2FbJ9jKZNe5arTXebxNLeSsOwafKE4sanJqOxyxo8yGjmmoOStfHKzKwuQMY\n\tZEL5i0G1R8hq4DhxS64/FQlTDGa9ekNOQfXJOc4E3sZ+IzoI9dMfIh5eT9dG6oAGHUJI\n\tUhG3PBTH9e34FMMDu7UwP/TNv6pDRYBxP8ra+81jr9HIKEN8m6GPdeFMpxBRt3ZnprM2\n\tlK4XNSLQzSmdobWSjFPAPu6yt8Jlp26U5Lg+Ot6RXMikOMPUMPjZXPwZILjOSXgcridh\n\tqwCA==","X-Gm-Message-State":"AHPjjUgE5YvCksxeQmKw76OSVnYFVe9MfZAKRIEDpDBIQwhNtON/GFnQ\n\tC46aaj+p4ESZsA==","X-Google-Smtp-Source":"ADKCNb42Z/tLKadiv76bEvv+UQ8iIcq0Q5U2vQUtTJ3BGDi4SmJ20Ql6X0f9Hf+M4wUoI70hgYqoJQ==","X-Received":"by 10.28.61.134 with SMTP id k128mr1539826wma.48.1504699663301; \n\tWed, 06 Sep 2017 05:07:43 -0700 (PDT)","From":"Peter Korsgaard ","To":"Bernd Kuhls ","References":"<20170902142956.22181-1-bernd.kuhls@t-online.de>","Date":"Wed, 06 Sep 2017 14:07:40 +0200","In-Reply-To":"<20170902142956.22181-1-bernd.kuhls@t-online.de> (Bernd Kuhls's\n\tmessage of \"Sat, 2 Sep 2017 16:29:55 +0200\")","Message-ID":"<87lglsdo8j.fsf@dell.be.48ers.dk>","User-Agent":"Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux)","MIME-Version":"1.0","Cc":"buildroot@buildroot.org","Subject":"Re: [Buildroot] [PATCH 1/2] package/libpng: bump version to 1.6.32","X-BeenThere":"buildroot@busybox.net","X-Mailman-Version":"2.1.18-1","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n\t","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n\t","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@busybox.net","Sender":"\"buildroot\" "}}]