starlingx
/
tools
Code Issues Proposed changes

libpng: CVE-2017-12652: omits check of chunk len 

libpng does not properly check the length of chunks against the user
limit.

Fix is provided by Centos RPMs:
libpng-1.5.13-8.el7.x86_64.rpm
libpng-devel-1.5.13-8.el7.x86_64.rpm

Test:
Build. Deploy AIO-SX.

Closes-Bug: 1902993
Change-Id: Id712d5416bafe331aa4299540c693585e5e181a2
Signed-off-by: Michel Thebeau <Michel.Thebeau@windriver.com>
(cherry picked from commit 596d66bc50)
This commit is contained in:
Michel Thebeau 2020-11-16 16:12:48 -05:00
parent a89ed2d8e3
commit ca0368edc0
6 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
centos-mirror-tools/config/centos/compiler/rpms_3rdparties.lst
View File

@ -1,2 +1,4 @@
# glib2-2.56.1-7.el7.x86_64.rpm provided by mock
kernel-headers-4.18.0-147.3.1.el8_1.x86_64.rpm#http://mirror.centos.org/centos/8.1.1911/BaseOS/x86_64/os/Packages/kernel-headers-4.18.0-147.3.1.el8_1.x86_64.rpm
libpng-1.5.13-8.el7.x86_64.rpm#http://mirror.centos.org/centos/7/os/x86_64/Packages/libpng-1.5.13-8.el7.x86_64.rpm
libpng-devel-1.5.13-8.el7.x86_64.rpm#http://mirror.centos.org/centos/7/os/x86_64/Packages/libpng-devel-1.5.13-8.el7.x86_64.rpm

2
centos-mirror-tools/config/centos/compiler/rpms_centos.lst
View File

@ -127,8 +127,6 @@ libmodman-2.0.1-8.el7.x86_64.rpm
# libmount-2.23.2-59.el7.x86_64.rpm provided by mock
# libmpc-1.0.1-3.el7.x86_64.rpm provided by mock
libpciaccess-0.14-1.el7.x86_64.rpm
libpng-1.5.13-7.el7_2.x86_64.rpm
libpng-devel-1.5.13-7.el7_2.x86_64.rpm
libproxy-0.4.11-11.el7.x86_64.rpm
# libpwquality-1.2.3-5.el7.x86_64.rpm provided by mock
# libselinux-2.5-14.1.el7.x86_64.rpm provided by mock

2
centos-mirror-tools/config/centos/distro/rpms_3rdparties.lst
View File

@ -2,6 +2,8 @@
glib2-devel-2.56.1-7.el7.x86_64.rpm#http://mirror.centos.org/centos/7/os/x86_64/Packages/glib2-devel-2.56.1-7.el7.x86_64.rpm
glib2-doc-2.56.1-7.el7.noarch.rpm#http://mirror.centos.org/centos/7/os/x86_64/Packages/glib2-doc-2.56.1-7.el7.noarch.rpm
kernel-headers-4.18.0-147.3.1.el8_1.x86_64.rpm#http://mirror.centos.org/centos/8.1.1911/BaseOS/x86_64/os/Packages/kernel-headers-4.18.0-147.3.1.el8_1.x86_64.rpm
libpng-1.5.13-8.el7.x86_64.rpm#http://mirror.centos.org/centos/7/os/x86_64/Packages/libpng-1.5.13-8.el7.x86_64.rpm
libpng-devel-1.5.13-8.el7.x86_64.rpm#http://mirror.centos.org/centos/7/os/x86_64/Packages/libpng-devel-1.5.13-8.el7.x86_64.rpm
python2-openstackdocstheme-1.23.2-1.el7.noarch.rpm#https://cbs.centos.org/kojifiles/packages/python-openstackdocstheme/1.23.2/1.el7/noarch/python2-openstackdocstheme-1.23.2-1.el7.noarch.rpm
python2-pip-9.0.3-6.fc29.noarch.rpm#https://kojipkgs.fedoraproject.org/packages/python-pip/9.0.3/6.fc29/noarch/python2-pip-9.0.3-6.fc29.noarch.rpm
python2-pytest-httpbin-0.2.3-6.el7.noarch.rpm#http://cbs.centos.org/kojifiles/packages/python-pytest-httpbin/0.2.3/6.el7/noarch/python2-pytest-httpbin-0.2.3-6.el7.noarch.rpm

2
centos-mirror-tools/config/centos/distro/rpms_centos.lst
View File

@ -416,8 +416,6 @@ libpcap-devel-1.5.3-11.el7.x86_64.rpm
libpciaccess-0.14-1.el7.x86_64.rpm
libpciaccess-devel-0.14-1.el7.x86_64.rpm
libpipeline-1.2.3-3.el7.x86_64.rpm
libpng-1.5.13-7.el7_2.x86_64.rpm
libpng-devel-1.5.13-7.el7_2.x86_64.rpm
libproxy-0.4.11-11.el7.x86_64.rpm
# libpwquality-1.2.3-5.el7.x86_64.rpm provided by mock
librdmacm-devel-1.1.0-2.el7.x86_64.rpm

1
centos-mirror-tools/config/centos/flock/rpms_3rdparties.lst
View File

@ -2,6 +2,7 @@ ansible-2.7.5-1.el7.ans.noarch.rpm#https://releases.ansible.com/ansible/rpm/rele
# glib2-2.56.1-7.el7.x86_64.rpm provided by mock
glib2-devel-2.56.1-7.el7.x86_64.rpm#http://mirror.centos.org/centos/7/os/x86_64/Packages/glib2-devel-2.56.1-7.el7.x86_64.rpm
influxdb-0.9.5.1-1.x86_64.rpm#https://s3.amazonaws.com/influxdb/influxdb-0.9.5.1-1.x86_64.rpm
libpng-1.5.13-8.el7.x86_64.rpm#http://mirror.centos.org/centos/7/os/x86_64/Packages/libpng-1.5.13-8.el7.x86_64.rpm
novnc-0.6.2-1.el7.noarch.rpm#http://cbs.centos.org/kojifiles/packages/novnc/0.6.2/1.el7/noarch/novnc-0.6.2-1.el7.noarch.rpm
libvirt-python-4.7.0-1.fc28.src.rpm#https://libvirt.org/sources/python/libvirt-python-4.7.0-1.fc28.src.rpm
python2-httpbin-0.5.0-6.el7.noarch.rpm#http://cbs.centos.org/kojifiles/packages/python-httpbin/0.5.0/6.el7/noarch/python2-httpbin-0.5.0-6.el7.noarch.rpm

1
centos-mirror-tools/config/centos/flock/rpms_centos.lst
View File

@ -455,7 +455,6 @@ libpcap-1.5.3-11.el7.x86_64.rpm
libpciaccess-0.14-1.el7.x86_64.rpm
libpipeline-1.2.3-3.el7.x86_64.rpm
libpmem-1.5.1-2.1.el7.x86_64.rpm
libpng-1.5.13-7.el7_2.x86_64.rpm
libproxy-0.4.11-11.el7.x86_64.rpm
libpsm2-10.3.58-1.el7.x86_64.rpm
libpsm2-compat-10.3.58-1.el7.x86_64.rpm