On Fri, Apr 26, 2013 at 11:08:48AM +1000, Aníbal Monsalve Salazar wrote:
>I'm preparing a new Debian package with Andreas' patch.

Hello Andreas,

We're not allowed to upload a new version of a library and according to
http://lists.debian.org/debian-devel-announce/2013/04/msg00006.html the
fix for #706181 should be included in the point release.

Is that okay with you?

The debdiff between 1.2.49-1 (testing) and my new version 1.2.49-4 is
below.

Cheers,

Aníbal


debdiff libpng_1.2.49-1.dsc libpng_1.2.49-4.dsc
diff -Nru libpng-1.2.49/debian/changelog libpng-1.2.49/debian/changelog
--- libpng-1.2.49/debian/changelog      2012-04-09 12:14:09.000000000 +1000
+++ libpng-1.2.49/debian/changelog      2013-04-26 16:49:13.000000000 +1000
@@ -1,3 +1,27 @@
+libpng (1.2.49-4) unstable; urgency=low
+
+  [ Andreas Beckmann ]
+  * libpng12-dev: Ship /usr/lib/${DEB_HOST_MULTIARCH}/libpng12.so.0 ->
+    /lib/${DEB_HOST_MULTIARCH}/libpng12.so.0 symlink, too, to prevent ldconfig
+    from playing ping-pong with the SONAME link.  (Closes: #706181)
+
+ -- Anibal Monsalve Salazar <ani...@debian.org>  Fri, 26 Apr 2013 16:42:23 
+1000
+
+libpng (1.2.49-3) unstable; urgency=low
+
+  * Remove patches/02-681408-CVE-2012-3386-Makefile.in.patch.
+    This patch is unnecessary. This issue is already fixed in automake.
+
+ -- Nobuhiro Iwamatsu <iwama...@debian.org>  Tue, 28 Aug 2012 16:22:51 +0900
+
+libpng (1.2.49-2) unstable; urgency=high
+
+  * Change "a+w" to "u+w" in Makefile.in to fix CVE-2012-3386
+    Add 02-681408-CVE-2012-3386-Makefile.in.patch
+    Closes: #681408
+
+ -- Anibal Monsalve Salazar <ani...@debian.org>  Fri, 13 Jul 2012 12:31:39 
+1000
+
 libpng (1.2.49-1) unstable; urgency=high
 
   * New upstream version 1.2.49
diff -Nru libpng-1.2.49/debian/libpng12-dev.links.in 
libpng-1.2.49/debian/libpng12-dev.links.in
--- libpng-1.2.49/debian/libpng12-dev.links.in  2011-07-18 21:52:43.000000000 
+1000
+++ libpng-1.2.49/debian/libpng12-dev.links.in  2013-04-26 16:41:04.000000000 
+1000
@@ -1,3 +1,4 @@
 /usr/share/man/man1/libpng12-config.1.gz /usr/share/man/man1/libpng-config.1.gz
 /usr/include/libpng12 /usr/include/libpng
-/lib/${DEB_HOST_MULTIARCH}/libpng12.so.0 
/usr/lib/${DEB_HOST_MULTIARCH}/libpng12.so
+/lib/${DEB_HOST_MULTIARCH}/libpng12.so.0 
/usr/lib/${DEB_HOST_MULTIARCH}/libpng12.so.0
+/usr/lib/${DEB_HOST_MULTIARCH}/libpng12.so.0 
/usr/lib/${DEB_HOST_MULTIARCH}/libpng12.so


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to