From 357b1a448380bf2900cc0ddcd5f31fa685ec2230 Mon Sep 17 00:00:00 2001 From: "Brian P. Hinz" Date: Thu, 26 Nov 2015 10:41:47 -0500 Subject: [PATCH] Update RPM dependency sources to latest versions Several of the pre-requisites have outstanding CVEs. --- contrib/packages/rpm/el5/SPECS/tigervnc.spec | 14 +++++++++----- contrib/packages/rpm/el6/SPECS/tigervnc.spec | 12 ++++++++---- 2 files changed, 17 insertions(+), 9 deletions(-) diff --git a/contrib/packages/rpm/el5/SPECS/tigervnc.spec b/contrib/packages/rpm/el5/SPECS/tigervnc.spec index ca5d7678..b269e223 100644 --- a/contrib/packages/rpm/el5/SPECS/tigervnc.spec +++ b/contrib/packages/rpm/el5/SPECS/tigervnc.spec @@ -5,7 +5,7 @@ Name: tigervnc Version: @VERSION@ -Release: 8%{?snap:.%{snap}}%{?dist} +Release: 1%{?snap:.%{snap}}%{?dist} Summary: A TigerVNC remote display system Group: User Interface/Desktops @@ -19,12 +19,12 @@ Source2: vncserver.sysconfig Source6: vncviewer.desktop Source9: FindX11.cmake Source11: http://fltk.org/pub/fltk/1.3.3/fltk-1.3.3-source.tar.gz -Source12: http://downloads.sourceforge.net/project/libjpeg-turbo/1.4.1/libjpeg-turbo-1.4.1.tar.gz -Source13: http://downloads.sourceforge.net/project/libpng/libpng15/older-releases/1.5.10/libpng-1.5.10.tar.bz2 +Source12: http://downloads.sourceforge.net/project/libjpeg-turbo/1.4.2/libjpeg-turbo-1.4.2.tar.gz +Source13: http://downloads.sourceforge.net/project/libpng/libpng15/1.5.24/libpng-1.5.24.tar.bz2 Source14: https://ftp.gnu.org/gnu/gmp/gmp-6.0.0a.tar.bz2 -Source15: http://ftp.gnu.org/gnu/libtasn1/libtasn1-4.5.tar.gz +Source15: http://ftp.gnu.org/gnu/libtasn1/libtasn1-4.7.tar.gz Source16: https://ftp.gnu.org/gnu/nettle/nettle-2.7.1.tar.gz -Source17: ftp://ftp.gnutls.org/gcrypt/gnutls/v3.3/gnutls-3.3.16.tar.xz +Source17: ftp://ftp.gnutls.org/gcrypt/gnutls/v3.3/gnutls-3.3.19.tar.xz Source100: http://www.x.org/releases/X11R7.7/src/everything/bigreqsproto-1.1.2.tar.bz2 Source101: http://www.x.org/releases/X11R7.7/src/everything/compositeproto-0.4.2.tar.bz2 @@ -1001,6 +1001,10 @@ fi %{_datadir}/icons/hicolor/*/apps/* %changelog +* Thu Nov 26 2015 Brian P. Hinz 1.6.80-1 +- Version bump for 1.6 release +- Update libjpeg-turbo, gnutls, libtasn1, libpng to latest upstream versions. + * Sun Sep 12 2015 Brian P. Hinz 1.5.80-8 - Build Xvnc with link path relative to $ORIGIN and apply dridir patch to make it portable. diff --git a/contrib/packages/rpm/el6/SPECS/tigervnc.spec b/contrib/packages/rpm/el6/SPECS/tigervnc.spec index fd3b2ccb..f0e0154a 100644 --- a/contrib/packages/rpm/el6/SPECS/tigervnc.spec +++ b/contrib/packages/rpm/el6/SPECS/tigervnc.spec @@ -2,7 +2,7 @@ Name: tigervnc Version: @VERSION@ -Release: 21%{?snap:.%{snap}}%{?dist} +Release: 1%{?snap:.%{snap}}%{?dist} Summary: A TigerVNC remote display system Group: User Interface/Desktops @@ -15,11 +15,11 @@ Source1: vncserver.service Source2: vncserver.sysconfig Source6: vncviewer.desktop Source11: http://fltk.org/pub/fltk/1.3.3/fltk-1.3.3-source.tar.gz -Source13: http://downloads.sourceforge.net/project/libpng/libpng15/older-releases/1.5.10/libpng-1.5.10.tar.bz2 +Source13: http://downloads.sourceforge.net/project/libpng/libpng15/1.5.24/libpng-1.5.24.tar.bz2 Source14: https://ftp.gnu.org/gnu/gmp/gmp-6.0.0a.tar.bz2 -Source15: http://ftp.gnu.org/gnu/libtasn1/libtasn1-4.2.tar.gz +Source15: http://ftp.gnu.org/gnu/libtasn1/libtasn1-4.7.tar.gz Source16: https://ftp.gnu.org/gnu/nettle/nettle-2.7.1.tar.gz -Source17: ftp://ftp.gnutls.org/gcrypt/gnutls/v3.3/gnutls-3.3.13.tar.xz +Source17: ftp://ftp.gnutls.org/gcrypt/gnutls/v3.3/gnutls-3.3.19.tar.xz BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildRequires: gcc, gcc-c++ @@ -423,6 +423,10 @@ fi %{_datadir}/icons/hicolor/*/apps/* %changelog +* Thu Nov 26 2015 Brian P. Hinz 1.6.80-1 +- Version bump for 1.6 release +- Update gnutls, libtasn1, libpng to latest upstream versions. + * Sat Mar 14 2015 Brian P. Hinz 1.4.80-21 - Build static libraries to meet new minimum requirements -- 2.39.5