netpbm-vulnerable-10.80.1-3.11.1 >
A `% p9|y &A+RZ}?%+#v]=_ncNS kԗVx Q !Y(Pkv{^ʐ4&Pi2 =wýth8M^-l + RE%gENdgÐE//T0D[ `BJ*H, jiB
]xWXIdQMClTPW(VNU
Fd6d4de8e19d1b1923cb1150a7c40fec938e118cf 8a325fd02ed5a974019cb386a7981557820061a291ec6dcafd1c9cee5667f10e d@ `% p9| $H,@roq-Cems]z>E#
2 ~ʲaq"oD
t;VxQf-r =qVaγ1z i) ؗ>|{ Ir a ےkM#P6Gn & hUP.vrj\*kAkqzIKDB7-~{ ".CrF"P$MBLt1p(EDža E& ''2n 1+ br b > p > . ? . d # N G ] ~
F
H P Z d
( 8 9 D : n F +\ G +p H +x I + X + Y + \ + ] + ^ + b + c , d -
e - f - l - u -( v -0 w .L x .T y .\ z .p . . . . C netpbm-vulnerable 10.80.1 3.11.1 Utilities with (Potential) Security Issues Provides utilities that have been shipped with main package along
others, but was considered vulnerable. `%
s390zp31 aSUSE Linux Enterprise 15 SUSE LLC BSD-3-Clause AND GPL-2.0+ AND IJG AND MIT AND SUSE-Public-Domain https://www.suse.com/ Productivity/Graphics/Convertors http://netpbm.sourceforge.net/ linux s390x IX 큤 `% `% c6c1e498609104b6a589b6e000989e000dea48bdfb175a226acb2d7f4ce25b5c 68fae25da966fe210e458e56d2dcecfa93ee4ed3c62119bf2c01d05a5a0c86ff root root root root netpbm-10.80.1-3.11.1.src.rpm netpbm-vulnerable netpbm-vulnerable(s390-64) @ @ @ @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libnetpbm.so.11()(64bit) netpbm rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 10.80.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 `\@\P[3|@ZF.@Z7YYf@Y:Y5GX43@XI@W@VrUJ@UPTl@dmueller@suse.com pgajdos@suse.com pgajdos@suse.com pgajdos@suse.com tchvatal@suse.com pgajdos@suse.com tchvatal@suse.com tchvatal@suse.com pgajdos@suse.com pgajdos@suse.com pgajdos@suse.com fstrba@suse.com pgajdos@suse.com pgajdos@suse.com mvyskocil@opensuse.org pgajdos@suse.com pgajdos@suse.com - skip failing tests for armv7hl (bsc#1181571) - enable the testsuite
- create netpbm-vulnerable subpackage and move pstopnm there
[bsc#1139636] - asan_build: build ASAN included
- debug_build: build more suitable for debugging
- security update
- added patches
CVE-2017-2579 [bsc#1024288], CVE-2017-2580 [bsc#1024291]
+ netpbm-CVE-2017-2579,2580.patch
neccessary for running with ASAN
+ netpbm-asan.patch - security update
* CVE-2018-8975 [bsc#1086777]
+ netpbm-CVE-2018-8975.patch - Add patch makeman-py3.patch to make sure to use python3 when
building
- Unpack the stuff only once - updated to 10.80.1
* pnmtopalm: Refuse to create a compressed image with more than 8
bits per pixel.
* pbmtext, libnetpbm font facilities: allow glyphs in font files
that have no bitmap data; just used for their advance value to
code a space.
* pbmtext: Improve error message when there is a problem reading
the font file.
* libnetpbm font facilities: consider font invalid if a glyph is
more than 65536 pixels high or wide.
* ppmshadow: handle images with a black background and low
contrast images (i.e. little difference between foreground and
background).
* ppmbrighten: fix bug: red pixels change hue. Introduced in
after Netpbm 10.11 (October 2002) and before Netpbm 10.18
(September 2003).
* palmtopnm: fix crash if invalid input contains color index that
is not in the palette. Always broken (palmtopnm was new in
Netpbm 9.10 (October 2001)).
* pnmtopalm: fix incorrect output with certain input files and
- packbits_compression. Always broken. -packbits_compression
was new in Netpbm 10.27 (March 2005).
* pnmtopalm: Correct error message recommending running
pnmquant when the real solution is to run pnmremap to modify the
image to Palm standard colors.
* pnmtopalm: Fix bug causing "color not in colormap" failure with
- colormap and maxval other than 255.
* libnetpbm: font facilities: fix invalid memory reference with
certain font files.
* libnetpbm: ppm_readcolordict: Improve error message when there is
a problem reading the color dictionary. Affects ppmhist.
* pgmmake: Fix bug: treats non-numeric gray-level argument as zero.
Always broken (Pgmmake was new in Netpbm 10.32, February 2006).
* pdbimgtopam, pamtopdbimg: fix various cases of incorrect output,
some always present (programs were new in Netpbm 10.52.00
(October 2010)).
* libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
rgb: color specifications: yields value slightly too dim.
Affects many programs. Broken in Netpbm 10.79 (June 2017). - Version update to 10.79.3:
* Fix license clash between GPL-2 and GPL-3
* Few small fixes - Drop patch netpbm-missing-file-close.patch fixed differently by
upstream
- Drop patch netpbm-jasper.patch which is no longer needed
- Remove accidental -O0 added to cflags
- Version update to 10.79.2:
* Fix 'format-security' GNU compiler warning.
* libnetpbm: pnm_parsecolorn(), pnm_parsecolor(): fix parsing of
rgb: color specifications: yields value slightly too dim.
* pamgauss: Add -maximize, -oversample . Thanks Anton Shepelev
* pnmconvol: Extend -normalize to be applicable to convolution
kernels specified by PGM file. Thanks Anton Shepelev
* g3topbm: tolerate fill bits.
* pbmtog3: Add -align8, -align16.
* ppmshadow: Improve results for very small maxval.
* ppmshadow: eliminate extraneous messages from pnmconvol.
* libnetpbm: Improve error message for purported image that is
exactly 1 byte long (so ends in the middle of what would be the
magic number).
* pbmtox10bm: Get the Perl interpreter for this Perl program from
the PATH instead of hardcoded as /usr/bin/perl (like all other
Netpbm Perl programs).
* ppmcolormask: fix incorrect output when input maxval is not 255.
* bmptopnm: fix crash when input is a Windows BMP with negative
number for width. Always broken. (bmptopnm was new, as
bmptoppm, in original Netpbm, 1992).
* pamcomp: fix incorrect output with -mixtransparency.
Always broken. (-mixtransparency was new in Netpbm 10.56,
September 2011).
* pamcomp: remove debug trace message with -mixtransparency.
Always broken. (-mixtransparency was new in Netpbm 10.56,
September 2011).
* pnmtojpeg: fix array bounds violation in argument list. Always
broken (pnmtojpeg was new to Netpbm in Netpbm 8.2 (March 2000).
* pamcrater: fix incorrect output with non-square image.
Introduced in Netpbm 10.69 (December 2014).
* svgtopam: fix treating negative width or height values in SVG
like twos complement positive numbers; fail instead. Always
broken (svgtopam was new in Netpbm 10.33 (March 2006)).
* svgtopam: fix error messages when input has splines or negative
positions. Always broken (svgtopam was new in Netpbm 10.33
(March 2006)).
* libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
supply a Standard Output accepter but not a Standard Input
feeder. Broken since Netpbm 10.40 (September 2007).
* Build: don't try to build standardppmdfont.c if it already
exists (so don't require ppmdcfont to exist). Broken around
Netpbm 10.35 (2006).
* Build: Define _XOPEN_SOURCE=500 in source files that use M_PI.
While C libraries in the past have always provided this with
just _XOPEN_SOURCE=null, it appears that M_PI is actually
defined by Single Unix Specification 2, aka UNIX98, for which
you need _XOPEN_SOURCE=500, and Cygwin has changed to enforce
this. - updated to 10.78.5
* pamgauss: Fix skewed output with even dimension.
* bmptopnm: fix crash when input is a Windows BMP with negative
number for width. - updated to 10.78.4
* pamcrater: fix incorrect output with non-square image.
* libnetpbm: fix bug: pm_system_XXX closes Standard Input if you
supply a Standard Output accepter but not a Standard Input
feeder.
* fix incorrect output with -mixtransparency.
* pamcomp: remove debug trace message with -mixtransparency.
* pnmtojpeg: fix array bounds violation in argument list.
* ppmpat: Add -color.
* ppmpat: Add -argyle1, -argyle2.
* pnmtotiff: Fail with -miniswhite or -minisblack on color image
rather than produce an invalid TIFF.
* tifftopnmcmyk: Default rows per strip to the TIFF library
default instead of whatever yields 8K strips.
* tifftonm: Fix incorrect PBM output with two-color paletted TIFF
image.
* tifftopnm: Fix memory corruption when image is more pixels than
can be represented as a C unsigned integer.
* tifftopnmcmyk: Fix bug: fails with very wide images and no
- rowsperstrip.
* svgtopam: Fix crash when out of memory.
* pnmcrop: Add -closeness
* libnetpbm: ppmd_fill_path: remove debug trace.
* pnmpad: Fix bug: incorrect output width.
- removed netpbm-no-build-date.patch: not needed since:
* --version global option: with SOURCE_DATE_EPOCH environment
variable, display source code datetime instead of build
datetime. - updated to 10.76.0
* pnmquantall: Fix failure when temporary file location is
not the same filesystem as the output file.
* pnmquantall: Fix incorrect handling of when the Pnmremap or
the final rename fails.
* giftopnm: Fix bug: crash on little-endian computers that can't
toleration unaligned memory access. Thanks Ignatios Souvatzis
(is@netbsd.org). Broken in Netpbm 10.47 (June 2009).
* cmuwmtopbm: fix trivial memory leak. Always broken (cmuwmtopbm
was in primordial Pbmplus, in 1988).
* Build: tifftopnm.c: fix undefined WIFSIGNALED, etc. - Added patch:
* netpbm-jasper.patch
+ Fix build with newer jasper - updated to 10.75.1
* see HISTORY for upstream changelog
* refreshed, reduced, extended patches:
netpbm-security-code.patch
netpbm-security-scripts.patch
netpbm-gcc-warnings.patch - updated to 10.72.4
* see HISTORY for upstrem changelog
* added useful returns
+ netpbm-gcc-warnings.patch
* forwardported
. netpbm-security-code.patch - Drop all libp?m.so symlinks - updated to 10.70.4
* pambackground: fix bug: segfault or incorrect results in most
cases.
* ppmtoarbtxt: Fix some undefined behavior when program limits
are exceeded.
* anytopnm: convert all images in a multi-image GIF instead of
just the first.
* nmnorm: add -bsingle, -wsingle.
* pamtosvg: fix use of unset variable; probably results in a
crash.
* pnmgamma -srgbtobt709, -bt709tosrgb: fix bug; incorrect output
nearly always.
* pamtilt: fix bug: unconditional crash.
* pgmmorphconv: fix bug: always produces PGM Plain format.
* giftopnm: Fix bug: crashes if purported GIF has neither a global
color map nor a local one.
* pgmmorphconv: add -gradient.
* pnmhisteq: add -noblack and -nowhite.
* tifftopnm: allow input file to be nonseekable.
* Add yuy2topam.
* Add pgmtosbig.
* Add st4topgm, pgmtost4.
* ppmtoarbtxt: fix bug: wrong output when high numbers represent
darker.
* ppmtorgb3: Fix buffer overflow with long input file name.
* st4topgm: Fix bug: with no argument, uses file named "'" instead
of Standard Input.
* pnmconvol: Fix bug: wrong output for pixels that convolve to
negative values (should be clipped to zero). - updated to 10.68.1
* pnmconvol: add -bias .
* Remove pnmcomp, install a pnmcomp symlink for pamcomp.
* Fix incorrect option parsing when there are multiple common
options (e.g. -plain -quiet).
* cameratopam: fix buffer overflow.
* cameratopam: fix incorrect output.
* ppmtopict: Fix unconditional crash. s390zp31 1613040904 10.80.1-3.11.1 10.80.1-3.11.1 pstopnm pstopnm.1.gz /usr/bin/ /usr/share/man/man1/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:18206/SUSE_SLE-15_Update/15d7a6de3a4bb96e7376af952a394fbe-netpbm.SUSE_SLE-15_Update cpio xz 5 s390x-suse-linux ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=9633b819722e125dfce8f40334c482d75eaa77ee, for GNU/Linux 3.2.0, stripped troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R R R R
E Y@.Y utf-8 b55a5a3037b30b83669eb8228bd4afdf00ad44971586f32776719376db2ceccb ? 7zXZ
! t/b1]
crv9w ݤ1xr R$"n/i_0!bФb74@AS& 37I3eDֹp
5^Ư"iR4j3 l⩶|Eɮ.+_*Jw5 6 MA, @`O~D&9Q!%' _̤rc!2IlF\Α6rVlXi͝.Vjm2Z-t5Ù4-dYJ, ng뼓z['ժh햑L~K QH! S0A^OX(L4x Xp%
FnW`JgUvn@sV;Ku(> ` X D\0ίh7Ko Ϗ!N=N,}:o^ȍObV1z
m7)`Ɔǂr`R< uOO;"I.^6|S 9_4* 7
R
ƯCif8gao9At?;RB !+ [%l[QaaTx'Lf %ueD&j؊H\ͦ3|b߲., >>XȑIjHhۆe${}J
hT=" O9Đyt~:.`G/pX6rzX5ZhvRtA5'C@.HIe~;0w-p0tօ dq'rN2q,?S Jxk8}ģ`QwвYN S ݗ.r
⋌r4q>H7F_O^g"S3b_8|vVj 6 u]zeCLp9@I* cmWz.sg 4
L|}
kl+̻gj iZ#Y B+ [8"rbQ#$o"HxD&g,e~}4DfFivq
EDR恓 rń! }>ԳEL 6:\dxe;/O~ri'ّwt5>7_Y#M
oCPZcx ^VLwq)<-G$G8m.ӾkΏeٺ/gԝq,Os?gw
<`!|$vY=Ea5>W &" dӤ,e~5yN*&&m )ޚF+ڔ4"l8i3FnEႻSAXdw7 .QW*O@'iKI)֝46DRi%Mf:%+ .㌦Ky d*2wHZtBHN U;:xUgl[(ھ1{?91^3WMO(";͗D:yw%|% ݠn^7̹x(nOyb8E߀%
cҭ]u$v g Qo <jIB(i#MĠYf gFܭ>]m!ġ[!9't>
ZߨV[5hltp¿ y툛ɀZ.V+e#nTVtF%MR5r5`vbr@TiU
! 5\ϨMYYqޕ]7&/2Ң'Gmį7QR&K?"aʉTj<Ӗ[m.=E %? _oعD[mHe(XO?d)Jg
v(ct# n71^u*Y>_ZO ?ǁyYwA=f,9#uQq\Y bZEGcRWZ_[?9͊KM5~`
g*\&6K,%3 *[] eS3\m}p=vCnD>n%pwOhOa xøEqLw6 +%,j_scuTז
NY|]{aqES$z=E4~ 3Ӝ#I;f
-]vRsgjfQ2}`3.$ _x8(3E_R/'\UNm'4:9!&x1*neQha#^EIM Sv ]0#1M75 ArVՎNH5F j \_ Nv[ӈ8/dL5@G|,Rf؎6;+fF2 e<rVb\uT%fʯT,@%"ecJ@&Oh PǢԍ"d&m !}f,0~^y& }/˶ j{^o>~
>M6f> [mEN>'g`ֺimWpx
%dkff(exb%&auDN#!S\;)#fIRcWðă?
~LJgsnG
.QY}?uM7 Y6w?qw(A0ҶCU
\bB*&.4
Ԗ(8T!3
/ awd6{YBJݜeVKY#LCD'=YpmS6B,ף|5mj'=E鎗X3U(B~p1\(24gmc;a-~ @($uƖ]r2 j b, * /
?+~{Fj &ODj/j8ښq7 F ^F X I1 JH#3k15_D+Nd QY2nQtM c$-F ,Xy2COÓX c
SGd0 )w,Csaكܻ(Gd(\ݚ`<5\A I;OmVT5 ,"VHaw֔^ʝ cAdn [9+q>D9ss#
\+&JNaQSj]ܱ~z yY +r4nP gާ]/i;f$?eٹH)=έz>֟Ѣ3ޞ)`Fh`Hw{=I b9x
ά
eI
.'F
SpPX5-4a xH
u |a}he7aи{djR،SvKkLMMxb_! ?ͩ Y;X t )59@Pk_ù[g^iML6R1(*
Ea)bQC:K ӝgU/\xY
(㟓Mj3
u,
eGh|˙ˎ*ؔ%M'07dn;z\O?[|X4}W@=BY xBYcq*ClYGQ
V
S[02YvD]X^.2E [DQ7 j+*O\E ǭ!)b~{-S{s8FԤHr羟`^#e-cZsɄs|EӋkmʇ]@PJ_ <(}~&fCݟJn FW_k
%*MY*5ƖuNz ngg=aK
~0v=v ktW, p}35!5{|qɀSk7Z߿1c G CK8EB߁*EBN DkG?V\7{ˮŵ
^xФyL#,x+ *n ˍ>kv՛.< El-Ɍ oL
fנ=|ނ@x6瀀$w E!9Rq Hd D˦a\kiGGǪHz,1Opؼ!鵉j+srD/&G {Mjv xpŝdL :T5|p5ˌ !+ JSs }5o4C+e
LKxI>%t
;PCɟ!"X0+ i^ԃٳ 3?9E\ nV9exZ˅OgHض7;m
ӷ3Ӗ=̘-ObxYYo%x,O9 sT3\`Sgȯ8Vפ*# SUR X9 %To
/=5UVUdLcQO n Έ-vTO ,Y
ȶ' ᏕUCStL y aM 5@1q /pf(W\}m[Q R^ZY O3n". ` 馆!>Z,;2 lqJBMؔ'[k;rNt˯l{SPpX9+:WG~ߠ{K1~1bS{V!IDlp9oB>,
_V^ =k
o[?EqS|SܥǙ+BZ A~'%4DYN ޅQq,-LHS\@/? f '? S`D|{7Jxr^Oj?ӢmOVN \qKϪjD Գ H +-ٝXJY
ΘKjW´+_C z
Iof*H@zI/S$ 6M ?cGԝ m2[\gi8Did5-PEu綷N EH0YU
v?%xpdT}]
`:F`LZ8;) RX78\h&b'ʽ+SVx0 /|i[ $
w?z\_"C8 QZ*|YrV)ܒ) w^EM\4|::]}${;jڜ58SPcakѧd?>F\[ۚ=;,8zblRpPE!1#<,dj )ɒGQ H&QlH< 8c2T5J3Js&ar+JIM_Jr.K9{pvT*/fepQDOHe%)' Y?2!Ltc+ᬺ/d8#AqRy_aT[H`Q~dC:[UjEpx+w8R6 I) h=(l{FYy*˓ p *
Qeh@9V2=5Y 1] K
sKVUY Ȩ /vx8;z 3: $t'˨vȮS1XI)٩hik1;\ 7vv + -ޝ
o
!~ wVa@'0_0NV0~woPkZLtN=L%Bdcv幦Ʃhss{0PC=(YԂM6Ȅx9\:j zb|'[JA<W"例K_
z j|F8$
O,pbNZ#Fk(tqʝè=q13 :d#gG4̳&-=HF ~6x;tu j}/w*Sĸle(|..u39F)9@ߟӟ
TePO.t/p]vW gn
jd-$~N>7
a !(}o $o`/ @gdK[Nl2%s?5bK :j%DsIGFUi$W C
ԍqWVm
]t(TvӶJ)Z |^kXڪ_?a:NeӬb18VJ`|/末DRNi ce<7Q4535Ł`z E֯Pi?v!8b/TӡH }r` ø *7Li^g55V#q99#2κAS%ū
q-Ɩ3;6e~0
cZCn=߉ʼ:Che8{~skS5k'\ {A g~ř<%-:dDM0Wl7LO
8 goc@cR<1(le'QaJYG}
3/A Zu&s|VkB_:O5oB}XaP# j6AvݩNQ m 8Wb&ON7IB:;dhwV< }zz퉴lOFqvp]z}ٻLm': }7 fxv, ЃJ}Af+VU°ONdOc:4Epa)d( inBե"^e%s]) yE` 6/D
tͿ Yf^//zI.P!hQtyV{9%8/ Uv)Qkv1Z+&S0P2F%{\1%ccnC0,t CsnK$m;n.NWZRcVa|ӌepwżB/}Q
qrl$L y@(Ǘ7;HZ n{+-sEpc]A4͕[X]XKAB~cD$UO#~g"&uqr+2#/?gz a%ay c+
,)+5K6\)PtBWQSyxla1F^^7FO;O[ љx۹ Z?roM2$,7I*/Mٶ[=εsoFet }v<,u7e 2x?%e0V
.4c(yMFpߋeԔ_WQ0 ϭZZzh',wRi`#HGV`[f"NA+ ϦU L?rKuFNo
{&#Yu慀>4;}S)
웕3mYRHh:tS ]$
ro@c7vx9Seh6qlR4%qn+
İ,Cڴ/HZ%-C\ɉf 8 r<)`Ҷޗ4$JtR?)QaQ AKiz^sp;gs!.elITSѪBP4]b2lx9 ae" %S VS EqBc3nip2zRP W? WH;~08~p vo2]{Znn>C3&Æ_mx08#JX9:oPt,rhZ @a%U[hQ0 iuH'?YVG6I$V[#_[7 p233R,C^ 9n$صCh?_:X\X~:̠1
uU
ȸZ+EAğtZKytş K8Q7Dޤ ڗMGE\5t1^1TpaQ*ʤ`6{k%Bs+J(G6!ݐD u{ K>
)aAoxo#2j QlmǘD%m RW<ڕ͗ YxJL!&lF:9WOg;zy (ԙZezE3嶃ձT:q2!M/Jg k^15h0XI,ဋDnLXRP ~MIy- Ôz
zȈ_fȌN|϶6d56 4JI.No)$bhM =%N+ zanEۉ=M,T%9w"me+ƙ9@, F#b UBbz}ļAA,V{&Uʲ}bl^iU& E(S֜F㚾/?臅+$},& F"LHLRKa Qw(>|d[
/v];73JLc 3G0d/cH[{D|PDyK(b:]xmS $;и.kVcuo%L
yݣx]@Au* ^%Č w % =6S DtQ=Q 0:R< [kͦ@QOHƒv/ѐiP~Iʙ e4=O5͜k j1: ל4J
(( ) 9(²n :R% 2Tt̀"9Uι骗03lgX.ӹaY~ QSZBo@v-ɨ |FL#f2) 7`'^/ĥ" 2C^m P)"ĤMejm@^U@G { tW&rѿ~aܹ*BT?," u}B&T%i} R} d "cdӕk IU2A> {}ȐU ĘCN|}w|8N1Fv>PeBrld b?̣hڷHژG$}}!Il>
9 \3
j2s[/ A
=ٴ_6~5mL[N10v"Zecp06,۲^7´ ȺЦ*3L:MM< W酏u,[XwP}m,\AkaG[n P$5,*Gb݆zU-mLկWo%Tp
v &;t̤!I2XX
Fqx$u]qҺ؈jvh}K cDBXa۠Ą(@Gy?$]$# +BB"韄ZI]H?CJIrm4फ़`Ɩvuڇ,i¶ Ʉlt4 n