Maintenance update and fix for CVE-2017-7526
authorAndre Heinecke <aheinecke@intevation.de>
Thu, 6 Jul 2017 08:22:40 +0000 (10:22 +0200)
committerAndre Heinecke <aheinecke@intevation.de>
Thu, 6 Jul 2017 08:22:40 +0000 (10:22 +0200)
commitbc7c1fcf6aeaa201749e063071829b3d42db20e7
tree6b543122e7fa5dc593b1d47953616c33e3c55765
parent7c391a65f7662ad826bdb637f4cab3f679d2b822
Maintenance update and fix for CVE-2017-7526

* packages/packages.current (libgcrypt): Update to 1.7.8.
(gpa): Update to 0.9.10
(libpng, curl, gnutls, gettext, libiconv, zlib): Update.
* NEWS: Mention changes.
* Makefile.am (EXTRA_DIST): Update accordingly.
* patches/gnutls-2.12.23: Move to gnutls-2.1.24
* patches/gpa-0.9.10/0001-Fix-crash-on-filename-conversion-error.patch:
New.

--
This is in preperation for a 2.3.4 release, mainly to include
the newest libgcrypt. It is likely that not all gnutls patches
will apply. This will be fixed in a second commit.
14 files changed:
Makefile.am
NEWS
packages/packages.current
patches/gnutls-2.12.24/01-openssl-wincrypt.patch [moved from patches/gnutls-2.12.23/01-openssl-wincrypt.patch with 100% similarity]
patches/gnutls-2.12.24/02-cve-2013-2116.patch [moved from patches/gnutls-2.12.23/02-cve-2013-2116.patch with 100% similarity]
patches/gnutls-2.12.24/03-cve-2014-1959.patch [moved from patches/gnutls-2.12.23/03-cve-2014-1959.patch with 100% similarity]
patches/gnutls-2.12.24/04-cve-2014-0092.patch [moved from patches/gnutls-2.12.23/04-cve-2014-0092.patch with 100% similarity]
patches/gnutls-2.12.24/05-cve-2014-3466.patch [moved from patches/gnutls-2.12.23/05-cve-2014-3466.patch with 100% similarity]
patches/gnutls-2.12.24/06-cve-2015-0282.patch [moved from patches/gnutls-2.12.23/06-cve-2015-0282.patch with 100% similarity]
patches/gnutls-2.12.24/07-cve-2015-0294.patch [moved from patches/gnutls-2.12.23/07-cve-2015-0294.patch with 100% similarity]
patches/gnutls-2.12.24/25_updatedgdocfrommaster.patch [moved from patches/gnutls-2.12.23/25_updatedgdocfrommaster.patch with 100% similarity]
patches/gnutls-2.12.24/fix-gcrypt-private-api-usage.patch [moved from patches/gnutls-2.12.23/fix-gcrypt-private-api-usage.patch with 100% similarity]
patches/gnutls-2.12.24/gnulib-mingw-w64-fix.patch [moved from patches/gnutls-2.12.23/gnulib-mingw-w64-fix.patch with 100% similarity]
patches/gpa-0.9.10/0001-Fix-crash-on-filename-conversion-error.patch [new file with mode: 0755]