[kmediafactory] Package has been FTBFS for to many releases
by Leigh Scott
commit 58675700660c41cbc7fd70e4d4d9313370cf4dbf
Author: leigh123linux <leigh123linux(a)googlemail.com>
Date: Sun Mar 12 07:43:50 2017 +0000
Package has been FTBFS for to many releases
.gitignore | 1 -
dead.package | 1 +
kmediafactory-0.8.0-dso.patch | 12 -
kmediafactory-0.8.0-mlt-melt.patch | 26 --
kmediafactory-0.8.1-FindFFmpeg.patch | 55 ----
kmediafactory-0.8.1-desktop_validate.patch | 9 -
...afactory-0.8.1-ffmpeg-2.4.3-compatibility.patch | 20 --
kmediafactory-0.8.1-ffmpeg.patch | 37 ---
kmediafactory-0.8.1-gcc47.patch | 33 ---
kmediafactory.spec | 298 ---------------------
sources | 1 -
11 files changed, 1 insertion(+), 492 deletions(-)
---
diff --git a/dead.package b/dead.package
new file mode 100644
index 0000000..45a29fb
--- /dev/null
+++ b/dead.package
@@ -0,0 +1 @@
+Package has been FTBFS for to many releases
7 years, 1 month
[freetype-freeworld/f24] Add CVE-2016-10244 fix from Fedora freetype (rh#1429965)
by Kevin Kofler
commit 5fc05842930e502a61a3dcce72a5725a28b70094
Author: Kevin Kofler <kevin.kofler(a)chello.at>
Date: Sat Mar 11 15:44:09 2017 +0100
Add CVE-2016-10244 fix from Fedora freetype (rh#1429965)
* Sat Mar 11 2017 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 2.6.3-2
- Add CVE-2016-10244 (heap buffer overflow, rh#1429965) fix from Fedora freetype
freetype-2.6.3-heap-buffer-overflow.patch | 29 +++++++++++++++++++++++++++++
freetype-freeworld.spec | 10 ++++++++--
2 files changed, 37 insertions(+), 2 deletions(-)
---
diff --git a/freetype-2.6.3-heap-buffer-overflow.patch b/freetype-2.6.3-heap-buffer-overflow.patch
new file mode 100644
index 0000000..e7c7264
--- /dev/null
+++ b/freetype-2.6.3-heap-buffer-overflow.patch
@@ -0,0 +1,29 @@
+From a660e3de422731b94d4a134d27555430cbb6fb39 Mon Sep 17 00:00:00 2001
+From: Werner Lemberg <wl(a)gnu.org>
+Date: Fri, 26 Aug 2016 00:23:27 +0200
+Subject: [type1] Fix heap buffer overflow.
+
+Reported as
+
+ https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36
+
+* src/type1/t1load.c (parse_charstrings): Reject fonts that don't
+contain glyph names.
+
+diff --git a/src/type1/t1load.c b/src/type1/t1load.c
+index c981adc..f8bf313 100644
+--- a/src/type1/t1load.c
++++ b/src/type1/t1load.c
+@@ -1776,6 +1776,12 @@
+ }
+ }
+
++ if ( !n )
++ {
++ error = FT_THROW( Invalid_File_Format );
++ goto Fail;
++ }
++
+ loader->num_glyphs = n;
+
+ /* if /.notdef is found but does not occupy index 0, do our magic. */
diff --git a/freetype-freeworld.spec b/freetype-freeworld.spec
index 517f8cc..363c073 100644
--- a/freetype-freeworld.spec
+++ b/freetype-freeworld.spec
@@ -1,7 +1,7 @@
Summary: A free and portable font rendering engine
Name: freetype-freeworld
Version: 2.6.3
-Release: 1%{?dist}
+Release: 2%{?dist}
License: (FTL or GPLv2+) and BSD and MIT and Public Domain and zlib with acknowledgement
URL: http://www.freetype.org
Source: http://download.savannah.gnu.org/releases/freetype/freetype-%{version}.ta...
@@ -12,7 +12,8 @@ Patch21: freetype-2.3.0-enable-spr.patch
Patch46: freetype-2.2.1-enable-valid.patch
## Security fixes:
-# none needed yet
+# https://bugzilla.redhat.com/show_bug.cgi?id=1429965
+Patch93: freetype-2.6.3-heap-buffer-overflow.patch
Provides: freetype-bytecode
Provides: freetype-subpixel
@@ -42,6 +43,8 @@ It transparently overrides the system library using ld.so.conf.d.
%patch46 -p1 -b .enable-valid
+%patch93 -p1 -b .heap-buffer-overflow
+
%build
%configure --disable-static \
@@ -85,6 +88,9 @@ echo "%{_libdir}/%{name}" \
%config(noreplace) %{_sysconfdir}/ld.so.conf.d/%{name}-%{_arch}.conf
%changelog
+* Sat Mar 11 2017 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 2.6.3-2
+- Add CVE-2016-10244 (heap buffer overflow, rh#1429965) fix from Fedora freetype
+
* Thu Jun 23 2016 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 2.6.3-1
- Update to 2.6.3 (matches Fedora freetype)
- Drop obsolete 0001-cff-Don-t-use-hmtx-table-for-LSB-45520.patch backport
7 years, 1 month
[freetype-freeworld/f25] Add CVE-2016-10244 fix from Fedora freetype (rh#1429965)
by Kevin Kofler
commit 146f3ff89661dec3b9b3156276c69a55296ef7fd
Author: Kevin Kofler <kevin.kofler(a)chello.at>
Date: Sat Mar 11 15:40:47 2017 +0100
Add CVE-2016-10244 fix from Fedora freetype (rh#1429965)
* Sat Mar 11 2017 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 2.6.5-2
- Add CVE-2016-10244 (heap buffer overflow, rh#1429965) fix from Fedora freetype
freetype-2.6.5-heap-buffer-overflow.patch | 29 +++++++++++++++++++++++++++++
freetype-freeworld.spec | 10 ++++++++--
2 files changed, 37 insertions(+), 2 deletions(-)
---
diff --git a/freetype-2.6.5-heap-buffer-overflow.patch b/freetype-2.6.5-heap-buffer-overflow.patch
new file mode 100644
index 0000000..e7c7264
--- /dev/null
+++ b/freetype-2.6.5-heap-buffer-overflow.patch
@@ -0,0 +1,29 @@
+From a660e3de422731b94d4a134d27555430cbb6fb39 Mon Sep 17 00:00:00 2001
+From: Werner Lemberg <wl(a)gnu.org>
+Date: Fri, 26 Aug 2016 00:23:27 +0200
+Subject: [type1] Fix heap buffer overflow.
+
+Reported as
+
+ https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36
+
+* src/type1/t1load.c (parse_charstrings): Reject fonts that don't
+contain glyph names.
+
+diff --git a/src/type1/t1load.c b/src/type1/t1load.c
+index c981adc..f8bf313 100644
+--- a/src/type1/t1load.c
++++ b/src/type1/t1load.c
+@@ -1776,6 +1776,12 @@
+ }
+ }
+
++ if ( !n )
++ {
++ error = FT_THROW( Invalid_File_Format );
++ goto Fail;
++ }
++
+ loader->num_glyphs = n;
+
+ /* if /.notdef is found but does not occupy index 0, do our magic. */
diff --git a/freetype-freeworld.spec b/freetype-freeworld.spec
index f90db2b..1bed447 100644
--- a/freetype-freeworld.spec
+++ b/freetype-freeworld.spec
@@ -1,7 +1,7 @@
Summary: A free and portable font rendering engine
Name: freetype-freeworld
Version: 2.6.5
-Release: 1%{?dist}
+Release: 2%{?dist}
License: (FTL or GPLv2+) and BSD and MIT and Public Domain and zlib with acknowledgement
URL: http://www.freetype.org
Source: http://download.savannah.gnu.org/releases/freetype/freetype-%{version}.ta...
@@ -12,7 +12,8 @@ Patch21: freetype-2.3.0-enable-spr.patch
Patch46: freetype-2.2.1-enable-valid.patch
## Security fixes:
-# none needed yet
+# https://bugzilla.redhat.com/show_bug.cgi?id=1429965
+Patch94: freetype-2.6.5-heap-buffer-overflow.patch
Provides: freetype-bytecode
Provides: freetype-subpixel
@@ -42,6 +43,8 @@ It transparently overrides the system library using ld.so.conf.d.
%patch46 -p1 -b .enable-valid
+%patch94 -p1 -b .heap-buffer-overflow
+
%build
%configure --disable-static \
@@ -85,6 +88,9 @@ echo "%{_libdir}/%{name}" \
%config(noreplace) %{_sysconfdir}/ld.so.conf.d/%{name}-%{_arch}.conf
%changelog
+* Sat Mar 11 2017 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 2.6.5-2
+- Add CVE-2016-10244 (heap buffer overflow, rh#1429965) fix from Fedora freetype
+
* Sun Nov 13 2016 Kevin Kofler <Kevin(a)tigcc.ticalc.org> 2.6.5-1
- Update to 2.6.5 (matches Fedora freetype, rh#1355743)
7 years, 1 month
[dvbcut/f24] (5 commits) ...fix missing icon (rfbz#3638)
by Leigh Scott
Summary of changes:
4456119... package is unmaintained - rhbz#4212 (*)
bbf1a25... Revert "package is unmaintained - rhbz#4212" (*)
16855b4... rebuild for ffmpeg-3.0.3 (*)
14f33db... Merge branch 'f25' (*)
dd287ba... fix missing icon (rfbz#3638) (*)
(*) This commit already existed in another branch; no separate mail sent
7 years, 1 month
[dvbcut/f25] (5 commits) ...fix missing icon (rfbz#3638)
by Leigh Scott
Summary of changes:
4456119... package is unmaintained - rhbz#4212 (*)
bbf1a25... Revert "package is unmaintained - rhbz#4212" (*)
16855b4... rebuild for ffmpeg-3.0.3 (*)
14f33db... Merge branch 'f25' (*)
dd287ba... fix missing icon (rfbz#3638) (*)
(*) This commit already existed in another branch; no separate mail sent
7 years, 1 month
[dvbcut] fix missing icon (rfbz#3638)
by Leigh Scott
commit dd287ba0ba4b1730fed285161e95758cfd375c70
Author: leigh123linux <leigh123linux(a)googlemail.com>
Date: Sat Mar 11 10:00:47 2017 +0000
fix missing icon (rfbz#3638)
dvbcut.spec | 49 ++++++++++++++++++++++---------------------------
1 file changed, 22 insertions(+), 27 deletions(-)
---
diff --git a/dvbcut.spec b/dvbcut.spec
index 51c845b..692d76f 100644
--- a/dvbcut.spec
+++ b/dvbcut.spec
@@ -1,13 +1,8 @@
%define svnrev 179
-%if 0%{?fedora} > 6 || 0%{?rhel} > 5
- %define qt3 qt3
-%else
- %define qt3 qt
-%endif
Name: dvbcut
Version: 0.6.1
-Release: 19.svn%{svnrev}%{?dist}
+Release: 20.svn%{svnrev}%{?dist}
Summary: Clip and convert DVB transport streams to MPEG2 program streams
Group: Applications/Multimedia
@@ -34,9 +29,8 @@ Patch8: %{name}-svn179-ffmpeg-2.0-compatibility.patch
Patch9: %{name}-svn179-ffmpeg-2.4.3-compatibility.patch
Patch10: %{name}-svn179-ffmpeg-3.0.3-compatibility.patch
-BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
BuildRequires: autoconf
-BuildRequires: %{qt3}-devel
+BuildRequires: qt3-devel
BuildRequires: libao-devel
BuildRequires: a52dec-devel
BuildRequires: libmad-devel
@@ -83,6 +77,9 @@ sed -i 's,$(STRIP) $(topdir)/bin/dvbcut$(EXEEXT),,' src/Makefile.in
sed -i '/debian/d' DISTFILES
sed -i '/ffmpeg.src/d' DISTFILES
+# fix desktop file
+sed -i -e 's|@prefix(a)/share/dvbcut/icons/dvbcut.svg|dvbcut|g' dvbcut.desktop.in
+
%build
unset QTDIR || : ; . /etc/profile.d/qt.sh
@@ -96,7 +93,7 @@ make
%install
-make DESTDIR=%{buildroot} install
+%make_install
mkdir -p %{buildroot}%{_datadir}/applications
desktop-file-install --vendor="" \
@@ -106,31 +103,23 @@ mkdir -p %{buildroot}%{_kde4_datadir}/kde4/services/
cp %{SOURCE6} %{buildroot}%{_kde4_datadir}/kde4/services/
-%clean
-rm -rf %{buildroot}
-
-
%post
-touch --no-create %{_datadir}/icons/hicolor || :
-if [ -x %{_bindir}/gtk-update-icon-cache ]; then
- %{_bindir}/gtk-update-icon-cache --quiet %{_datadir}/icons/hicolor || :
-fi
-
-update-desktop-database &> /dev/null || :
-
+/usr/bin/update-desktop-database &> /dev/null || :
+/bin/touch --no-create %{_datadir}/icons/hicolor &>/dev/null || :
%postun
-touch --no-create %{_datadir}/icons/hicolor || :
-if [ -x %{_bindir}/gtk-update-icon-cache ]; then
- %{_bindir}/gtk-update-icon-cache --quiet %{_datadir}/icons/hicolor || :
+/usr/bin/update-desktop-database &> /dev/null || :
+if [ $1 -eq 0 ] ; then
+ /bin/touch --no-create %{_datadir}/icons/hicolor &>/dev/null
+ /usr/bin/gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
fi
-update-desktop-database &> /dev/null || :
-
+%posttrans
+/usr/bin/gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
%files
-%defattr(-,root,root,-)
-%doc ChangeLog COPYING CREDITS README README.icons
+%doc ChangeLog CREDITS README README.icons
+%license COPYING
%{_bindir}/%{name}
%{_mandir}/man1/%{name}.1.gz
%{_datadir}/applications/*.desktop
@@ -141,6 +130,12 @@ update-desktop-database &> /dev/null || :
%changelog
+* Sat Mar 11 2017 Leigh Scott <leigh123linux(a)googlemail.com> - 0.6.1-20.svn179
+- fix missing icon (rfbz#3638)
+- fix scriplets
+- remove useless define
+- clean up spec file
+
* Sat Nov 5 2016 David Timms <iinet.net.au at dtimms> - 0.6.1-19.svn179
- rebuild for ffmpeg-3.0.3
- add combined patch covering:
7 years, 1 month
