netpbm-vulnerable-10.80.1-3.11.1 >
A `%
mp9|3sCPMLc ^*Ut%X-3Q{S6Q) Y0̰+zV/M Vv1]G1N-DbdR,g忩
]}NT|8&3cQ;).uegm@tؐW;&M_tЍ5zɺZ i mYnR^(ovg+նap T&=p )i%q9MJ6b226b7ee6a03fbb0d65b983f295c57e2cedc5550 04a6025a4600849f02ffdfd7ff9b23ab85f4e80136788c4a7cee91d3133246d2 eh `%
mp9|%;CjnaG}N9q
h #f r}ߓO R[ R3VUha":oͮB/p\dk"2Ŭt3lCynbYb!
# @OY9y/%X bFAz6 JF c]GGbYc|[ $yzQ)]U٘+84i3$|BaԈ! `$k n]TQ+ " > p > / ? . d # N
K a
J
L T ^ h
( 8 9 X : F +p G + H + I + X + Y + \ + ] + ^ + b , c , d -& e -+ f -. l -0 u -D v -L w .x x . y . z . . . . . C netpbm-vulnerable 10.80.1 3.11.1 Utilities with (Potential) Security Issues Provides utilities that have been shipped with main package along
others, but was considered vulnerable. `% ibs-centriq-3 !SUSE Linux Enterprise 15 SUSE LLC BSD-3-Clause AND GPL-2.0+ AND IJG AND MIT AND SUSE-Public-Domain https://www.suse.com/ Productivity/Graphics/Convertors http://netpbm.sourceforge.net/ linux aarch64 p 큤 `% 8`% +1a946367e680f9a2c8d320ed02d0b7925572991f94eb92da95d26abd1f87a639 68fae25da966fe210e458e56d2dcecfa93ee4ed3c62119bf2c01d05a5a0c86ff root root root root netpbm-10.80.1-3.11.1.src.rpm netpbm-vulnerable netpbm-vulnerable(aarch-64) @ @ @ @ @
ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libnetpbm.so.11()(64bit) netpbm rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 10.80.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 `\@\P[3|@ZF.@Z7YYf@Y:Y5GX43@XI@W@VrUJ@UPTl@dmueller@suse.com pgajdos@suse.com pgajdos@suse.com pgajdos@suse.com tchvatal@suse.com pgajdos@suse.com tchvatal@suse.com tchvatal@suse.com pgajdos@suse.com pgajdos@suse.com pgajdos@suse.com fstrba@suse.com pgajdos@suse.com pgajdos@suse.com mvyskocil@opensuse.org pgajdos@suse.com pgajdos@suse.com - skip failing tests for armv7hl (bsc#1181571) - enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
[bsc#1139636] - asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
+ netpbm-CVE-2017-2579,2580.patch
neccessary for running with ASAN
+ netpbm-asan.patch - security update
* CVE-2018-8975 [bsc#1086777]
+ netpbm-CVE-2018-8975.patch - Add patch makeman-py3.patch to make sure to use python3 when
building
- Unpack the stuff only once - updated to 10.80.1
* pnmtopalm: Refuse to create a compressed image with more than 8
bits per pixel.
* pbmtext, libnetpbm font facilities: allow glyphs in font files
that have no bitmap data; just used for their advance value to
code a space.
* pbmtext: Improve error message when there is a problem reading
the font file.
* libnetpbm font facilities: consider font invalid if a glyph is
more than 65536 pixels high or wide.
* ppmshadow: handle images with a black background and low
contrast images (i.e. little difference between foreground and
background).
* ppmbrighten: fix bug: red pixels change hue. Introduced in
after Netpbm 10.11 (October 2002) and before Netpbm 10.18
(September 2003).
* palmtopnm: fix crash if invalid input contains color index that
is not in the palette. Always broken (palmtopnm was new in
Netpbm 9.10 (October 2001)).
* pnmtopalm: fix incorrect output with certain input files and
- packbits_compression. Always broken. -packbits_compression
was new in Netpbm 10.27 (March 2005).
* pnmtopalm: Correct error message recommending running
pnmquant when the real solution is to run pnmremap to modify the
image to Palm standard colors.
* pnmtopalm: Fix bug causing "color not in colormap" failure with
- colormap and maxval other than 255.
* libnetpbm: font facilities: fix invalid memory reference with
certain font files.
* libnetpbm: ppm_readcolordict: Improve error message when there is
a problem reading the color dictionary. Affects ppmhist.
* pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
* pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
some always present (programs were new in Netpbm 10.52.00
(October 2010)).
* libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
rgb: color specifications: yields value slightly too dim.
Affects many programs. Broken in Netpbm 10.79 (June 2017). - Version update to 10.79.3:
* Fix license clash between GPL-2 and GPL-3
* Few small fixes - Drop patch netpbm-missing-file-close.patch fixed differently by
upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
* Fix 'format-security' GNU compiler warning.
* libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
rgb: color specifications: yields value slightly too dim.
* pamgauss: Add -maximize, -oversample . Thanks Anton Shepelev
* pnmconvol: Extend -normalize to be applicable to convolution
kernels specified by PGM file. Thanks Anton Shepelev
* g3topbm: tolerate fill bits.
* pbmtog3: Add -align8, -align16.
* ppmshadow: Improve results for very small maxval.
* ppmshadow: eliminate extraneous messages from pnmconvol.
* libnetpbm: Improve error message for purported image that is
exactly 1 byte long (so ends in the middle of what would be the
magic number).
* pbmtox10bm: Get the Perl interpreter for this Perl program from
the PATH instead of hardcoded as /usr/bin/perl (like all other
Netpbm Perl programs).
* ppmcolormask: fix incorrect output when input maxval is not 255.
* bmptopnm: fix crash when input is a Windows BMP with negative
number for width. Always broken. (bmptopnm was new, as
bmptoppm, in original Netpbm, 1992).
* pamcomp: fix incorrect output with -mixtransparency.
Always broken. (-mixtransparency was new in Netpbm 10.56,
September 2011).
* pamcomp: remove debug trace message with -mixtransparency.
Always broken. (-mixtransparency was new in Netpbm 10.56,
September 2011).
* pnmtojpeg: fix array bounds violation in argument list. Always
broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
* pamcrater: fix incorrect output with non-square image.
Introduced in Netpbm 10.69 (December 2014).
* svgtopam: fix treating negative width or height values in SVG
like twos complement positive numbers; fail instead. Always
broken (svgtopam was new in Netpbm 10.33 (March 2006)).
* svgtopam: fix error messages when input has splines or negative
positions. Always broken (svgtopam was new in Netpbm 10.33
(March 2006)).
* libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
supply a Standard Output accepter but not a Standard Input
feeder. Broken since Netpbm 10.40 (September 2007).
* Build: don't try to build standardppmdfont.c if it already
exists (so don't require ppmdcfont to exist). Broken around
Netpbm 10.35 (2006).
* Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
While C libraries in the past have always provided this with
just _XOPEN_SOURCE=null, it appears that M_PI is actually
defined by Single Unix Specification 2, aka UNIX98, for which
you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
this. - updated to 10.78.5
* pamgauss: Fix skewed output with even dimension.
* bmptopnm: fix crash when input is a Windows BMP with negative
number for width. - updated to 10.78.4
* pamcrater: fix incorrect output with non-square image.
* libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
supply a Standard Output accepter but not a Standard Input
feeder.
* fix incorrect output with -mixtransparency.
* pamcomp: remove debug trace message with -mixtransparency.
* pnmtojpeg: fix array bounds violation in argument list.
* ppmpat: Add -color.
* ppmpat: Add -argyle1, -argyle2.
* pnmtotiff: Fail with -miniswhite or -minisblack on color image
rather than produce an invalid TIFF.
* tifftopnmcmyk: Default rows per strip to the TIFF library
default instead of whatever yields 8K strips.
* tifftonm: Fix incorrect PBM output with two-color paletted TIFF
image.
* tifftopnm: Fix memory corruption when image is more pixels than
can be represented as a C unsigned integer.
* tifftopnmcmyk: Fix bug: fails with very wide images and no
- rowsperstrip.
* svgtopam: Fix crash when out of memory.
* pnmcrop: Add -closeness
* libnetpbm: ppmd_fill_path: remove debug trace.
* pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
* --version global option: with SOURCE_DATE_EPOCH environment
variable, display source code datetime instead of build
datetime. - updated to 10.76.0
* pnmquantall: Fix failure when temporary file location is
not the same filesystem as the output file.
* pnmquantall: Fix incorrect handling of when the Pnmremap or
the final rename fails.
* giftopnm: Fix bug: crash on little-endian computers that can't
toleration unaligned memory access. Thanks Ignatios Souvatzis
(is@netbsd.org). Broken in Netpbm 10.47 (June 2009).
* cmuwmtopbm: fix trivial memory leak. Always broken (cmuwmtopbm
was in primordial Pbmplus, in 1988).
* Build: tifftopnm.c: fix undefined WIFSIGNALED, etc. - Added patch:
* netpbm-jasper.patch
+ Fix build with newer jasper - updated to 10.75.1
* see HISTORY for upstream changelog
* refreshed, reduced, extended patches:
netpbm-security-code.patch
netpbm-security-scripts.patch
netpbm-gcc-warnings.patch - updated to 10.72.4
* see HISTORY for upstrem changelog
* added useful returns
+ netpbm-gcc-warnings.patch
* forwardported
. netpbm-security-code.patch - Drop all libp?m.so symlinks - updated to 10.70.4
* pambackground: fix bug: segfault or incorrect results in most
cases.
* ppmtoarbtxt: Fix some undefined behavior when program limits
are exceeded.
* anytopnm: convert all images in a multi-image GIF instead of
just the first.
* nmnorm: add -bsingle, -wsingle.
* pamtosvg: fix use of unset variable; probably results in a
crash.
* pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
nearly always.
* pamtilt: fix bug: unconditional crash.
* pgmmorphconv: fix bug: always produces PGM Plain format.
* giftopnm: Fix bug: crashes if purported GIF has neither a global
color map nor a local one.
* pgmmorphconv: add -gradient.
* pnmhisteq: add -noblack and -nowhite.
* tifftopnm: allow input file to be nonseekable.
* Add yuy2topam.
* Add pgmtosbig.
* Add st4topgm, pgmtost4.
* ppmtoarbtxt: fix bug: wrong output when high numbers represent
darker.
* ppmtorgb3: Fix buffer overflow with long input file name.
* st4topgm: Fix bug: with no argument, uses file named "'" instead
of Standard Input.
* pnmconvol: Fix bug: wrong output for pixels that convolve to
negative values (should be clipped to zero). - updated to 10.68.1
* pnmconvol: add -bias .
* Remove pnmcomp, install a pnmcomp symlink for pamcomp.
* Fix incorrect option parsing when there are multiple common
options (e.g. -plain -quiet).
* cameratopam: fix buffer overflow.
* cameratopam: fix incorrect output.
* ppmtopict: Fix unconditional crash. ibs-centriq-3 1613040767 10.80.1-3.11.1 10.80.1-3.11.1 pstopnm pstopnm.1.gz /usr/bin/ /usr/share/man/man1/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:18206/SUSE_SLE-15_Update/15d7a6de3a4bb96e7376af952a394fbe-netpbm.SUSE_SLE-15_Update cpio xz 5 aarch64-suse-linux ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=c4e9716ea7a7d71aff5d82805f19148e70762a84, for GNU/Linux 3.7.0, stripped troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R R R R KE utf-8 2e3ac519514588846016726de2a06a54d50cd6227369c6d185ebb573d309b770 ? 7zXZ
! t/"2]
crv9w ݤo xe~YыúԽasЈڷ*LE1[d%_NN8Y!% 5 Q :2q:06;JQxY+&wY.?~] i/2q0 k ,P WC$Ѭ XWz$N9wi0zL\PdXlsXӯUwXYƻK֯ +>8"vͮ s/XT d6۱'G?m+4
bPaC+2p )|
u8sOw#UȔFm_EtMHf^=RA[A )ڌ{x2j rݐGirK^q^F;݇&g~ߤiI "1Q O)-o6Mv\hr[Ufs۲jG 3z;ݝ48y2?7mLڭ~myS.nY>8;ϒV &Qc`- 7 c'`h!.!eXoKZ @}t-(_HkizTx%w* Rax F^~8zÙ /)͐#Msl&aE]S%) jt~B܌sERױ - 4$e5&EWC|%tT6!)rUxvcM+_ Y52iOJp6pAH ܒM62 3q^?dy{+C/Mr2!l0NJh7!M=ΕP yOxxze/ U՚)KH51|\1uA#4ʛPh u6; S{(Q . ΪnW
E~ku`WqjɋqyP 3M\TuDȗ.QZݴCEטvtn֮E\cR(:6^E
9D\o~ hQ]oTltV{CU5uɂ]^:+4l1Esz'N8,QU#!]S6:V']_R v@HζIh">V~ C^uyZVl" ƨlq9%J0uI2_i}bFA8lUiV9g@ֻ!"6 /tl-s\?Mv~rrϟ
"[ΝzGЅlAUC" Ie f0i:'\ p<
pm Tl Cwd^QhKӮe
:Ji.?OmR}%RF^|}Ǒ!u§Mw0NAQ w[hT(8l_<hF&ar^ Kח#$p3 55g!K'۶Kgb 0(/qtͲpwJq9Ю~1Ȯ uJOeV y?'/7?͝VJxL|jB1=vw YoA& m,[u%;P@&;t&3wWGo^]bXmGdVxA *6 0"HRK:F~#SAZj u{L3hХLP=# ݟe4A (E~]L5)gd5!Bݿ&1 ۛzMZ+[WxӶ W@-
_Y(m:Q7ѧt>5ϨR0|WY|c7L&ijё&(w$90 ! ?.TF4WP, &] nǚ Y9T62=Ё4rfuh÷pbX^ oe] vVf>Y29UaIaˎSWRڞ` 4dvKǽ{Lѯt03&VR*ntWڧˡ՟H0xr]0 o%SJ\LjnU;%}y&;ن TVTߙQt{L6t H,Зџ ^L|ڳMͨy@ 8
^ǙaN@;q&N#/7ᧅ>]:Sߡ 罜H=@2 g}1Li rP۟#Ƒo&A7& ~7Œ=6\8QJ\IM| "I>>)u'?3 ~$$~|˅~8 plH|s#HbP4g%92lRUH ry"RUR>&1=KNy#߉4YaԆC ($pR^åj'SNl{ yIZ-53ZVJ#ͤVR`R@ Ω;Pa;qi4R' a2͉ү:*ؙ3&R viME +bƇOCwnDGM'`/ ϗD-fR%oXJ`juO
S 5>M9.$:[iRѝ eR }`Eٳ-V7 u<JjKq# ,z HO`BXO%Y-%jC[ ͺ]@Z X|!<~O -z*)0Ӫ§ ^Ι.9=Jç3ذ4p0#%Z3MNuc{rel &HHݙy'`zY$ ;
<?Z5뛅P1ǀc[Y)r", 2-c
f lb&mOe{ 3괗Q IX"M)imϋu;: m*?VThQ}¿#{4?6X>+w{LnriCe5y,L4ݜq2]{qr ؔ e
92Tw (^:0@<0ݻ wuqKTdۙz}NuUAP>.^v[`H2^+wƥrܯ?PBff\^ RQ7@[pْZAtr!Mr{{!wA>,s= 2gT!`mQ&:+et^g UXmڙg3c LvQ1 ,GtxRu ǓTLoDx`H M3!1ܩqo,<+7f-/[]3OMlSBn 4xn:1K6/2*;mٲ ͆ R`<Jy;ERm ؽ
d3
`Bǀa:ꖜs+ڤą^a;_yY|`, k>dB)/ #-ՑΌ#{*B1H!pglIRb?uPZr, #(yDiekώ9<]$s?*2"ePp;I3.xXVkm&4̗( e##zG_V5I:ҋ
t
K)I
$-tqRYR}|φ):Q?3Ň I Ɯs*4d (:qLCyş^-F~S 1 p3 $'c1#)%) 0s &R02(x AtCG Д쀦* ڒ 1B-
f y͌h L0סw8_y%T6}ŷ_2[ԋ{J*k=[sZkf3(cw56ǠpO"KcU%C%4 vwAj#tߟ{)}mB#WԽ[ob}F=1ur xc1xfb], \{ F;cTB[
-YĈ҆\hLIjvHiaJԙu|]@J7 j&KtI6@
95uJC&rh^($osFgC~#Eǣ럾7 vC m) k=0 U dI- bw u.[BȬ.0_Gf)xd_i54?%>Y9|@dlFZ~fto8٠x Qj a0<v5
HPWF˨J&.Jߐ/s\ܤwWI!!Dc{r!vQ}J~_tj5 WB1U
>|^%,pG?fL_." k@V?8N&
W -* =l5-$} ~jغ\j2Or̛{0< Z hf5^ic6u.jֳۡNmLH@xsAIVZ녰6Ef &?HJ'
Z6W}yL;gaxC:j[mZJ|Cw_ݣLLPoZ -q 'x&ݳ,V
"[/aⷱGr}m&[[m0'L b]CqceҋÙ+jI
u_HO;nBq`m8L; jb=/y{Q۳}Ҹ\ K3,j?6#{2I"A4aUZ !
oY Z^f<3$S.C >ˆPT߁hf1b_wNj 0,[tvw r]*q `sz[ ڎ(.])X`Dz
ҮI,EAvɬT=V N KOm98| 1IZu74xcv 3'"ޭ8Aw?G x J!AUZ6m]S h&)]ђ2 p]22F똤9O;sw{ {4TE㷱,<}oL { ݫDWxJYy^U`[fI-Q&Qv={ｸݴO*W& !g]4b^,k ; Ag|* [ة 8?hmm m!7` +WUa&G).ݎQ555Q\J `|/͖=*`[}iĠM QaI'
.CfL/R9/Iِj qLMJX<,t1xc3L2뼋zcP
^PbVd
S>7Wys[d
pyh2vEh[H8tZ
eI)z3Z""iq 2ߵ+tJC^W[5[3ml#!qH%]L_Sk5ʟEҡa,$0%I GhB._{"5PRvB&CH6y9cK[ KpT7M "[bb#k*Fsʽ"{PH`F.A-/V4Aa1[[ C% ~L`ePzG}o6> ?K1#&-*C (6N bVf</}θ eѤGx)e"3Yа,=,d5" {;vԎ mWqm¼o =;G'ָ5ڐz88ɣ`ie>uFT3Iè^a !e{bTCKhTz@
|Hp,H8 ;q gܦFߜC'.] l
-Vi$/ OhFV驥DU$;[eIf _kjpcoR:r]SF\ N
6}Ⱦ9ӱěJ6EqNiy{rv qQ
D /9fHs՜̟!J
o#E$'hi3?rOW!{-v9vI>eEfJQc/8 d%$풝-A%~O I \)NzQZeWLͪ}U{ܼ!`N}o~
{}%"T Jp[
Ye0_3=X P!&8Vߗ/{FŚjWɫ*Du ])jv`#Rc(ʼnpda6SN=lvRJ,Ys-uP5&d鿆KEʕPPtx qΌ}(E{aבBCk/"I5 e:X= ;0ᗟZb j{AĬ/]XϊP07E#^_ofj'8[
(&3Dz}6'Vv orLT
^%G" ^ڇt췽,&[y8 ƚ×0je)#ʠv38:bd~
HSS6{9IuD.n_g V5eN']#w#"jK;\Y"p7u1 4\;`XI
u^{oQl<;Wi!(rV\%$8:?kA
j )21
JjZ9dj)Sp Oǔ
T!9#QgKtBZ JJ4}溬 Oph}J?~}źp|f ̞ nEz`}U,6i>L \IEuidWIu|r)!+ *a,>R9 2K)Ϳv)Ŀ|NFƶQa; 5(Χ
L"DW&|4i'kYxN$>PY|K)ϱM`IXH "
?n /N2oDV ėbUP?JI2D(u%Pl(phynp҅U!#
ϧtb?=kdJu} T2ͺ0q #O'?t1KCbopaC5h] e~96Q?5!ˉ' 0RM7L90h( f ȸ[r/
͑hgZg@
5K&=li]V_9[0; }ɫŮ1_:n?
atE_M=˞>OyOMAMbr{9 kCsSK_.q=.) 3j]P" 7L<,PLH.n>PokYna
?^Aіm lø,t'EfYmU@oqS$~:8Wэ`3sجogFjDPbALGY cbɯL O#-{~˝͉k ?Nv1؈)0 X7>Gz
r=4.ie2]4 _ uA:vdHR5ұDrO3Gl
=7cwp ܘwcYTGTت []OT̎$oO/0v:{Z7q;]zx PA/.X>tP%z:l.sWkV!C5KYvG G( o؋%݉HH\G'~ҠV,j̅^J < O˸5ztyKJb %pV@sx2צ1=7ϔ7$- n8 R4 1cJC֊Da"x\EKb Y 1IPLBhUT 6pW qCAh2Zr* a V=Nt<95988}z3] խ9mN
{}m}
:PEԪbrTzdG QuN&?[J態V MujňWDav:R?g+箟%0Sb;EM%pk9X2q[t3.)trO')w
7s? c#ަP2FQD17ӺeAq4`a.dQBߘFwKKI,HCSoY )B 3 p̏zoŹ^6ǂDD m ]Jچ
RhH x(ąZ2T/q<\dbɭRVޏ6|-Np]My{&\rq)3wE2v0R 0.*M ]}ZLt&Q|Iq~_o3 4w>mJ4 z ʫ G6R9C !b@m.и}hnw3Z9]. [sQӠ;|<@vt& %IQ/,En' GN/
jC{6.nl ,v "}tFX"}g܁
pTB <|<;u :0O9"} F'w^gf3x0OI%QdXgUvf| BBX i7 ^dž\on\g`Gjb!s3T1"}nBy9:O91w #vZ1jˀÆ| lO1jm A7OZY2WtMz~GqEn
JNsfh|KI\(,eY
NJѪoZ ~X)XD\ay~,l771w/0WĻ
p l\e $LX-6blYIK+ +Hh;>w:U
/
MX?0fRClGZ(6
7 |^~V Ex|wZK.kװ/Yg)[prz 2Msƺ3$
*rA( ia]knK)qdtHqw 18؈|vX FgU3A≷bO
YfpMi
eւ^>}FQ7r&'Xsz d *
YZ