[arch-commits] Commit in mupdf/trunk (PKGBUILD)

[Christian Hesse]

    Date: Tuesday, August 30, 2016 @ 20:23:41
  Author: eworm
Revision: 188073

upgpkg: mupdf 1.9_a-5

make sure that number of colors in mesh params is valid
https://security-tracker.debian.org/tracker/CVE-2016-6525

Modified:
  mupdf/trunk/PKGBUILD

----------+
 PKGBUILD |   13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2016-08-30 18:30:37 UTC (rev 188072)
+++ PKGBUILD	2016-08-30 20:23:41 UTC (rev 188073)
@@ -9,7 +9,7 @@
 pkgbase=mupdf
 pkgname=(libmupdf mupdf mupdf-gl mupdf-tools)
 pkgver=1.9_a
-pkgrel=4
+pkgrel=5
 pkgdesc='Lightweight PDF and XPS viewer'
 arch=('i686' 'x86_64')
 url='http://mupdf.com'
@@ -20,12 +20,14 @@
 options=('staticlibs')
 source=("http://mupdf.com/downloads/mupdf-${pkgver/_/}-source.tar.gz"
         '0001-mupdf-openjpeg.patch'
-        'mupdf-0001-bug-696941-fix-use-after-free.patch::http://git.ghostscript.com/?p=mupdf.git;a=commitdiff_plain;h=fa1936405b6a84e5c9bb440912c23d532772f958'
+        'mupdf-0001-bug-696941-fix-use-after-free.patch::http://git.ghostscript.com/?p=mupdf.git;a=patch;h=fa1936405b6a84e5c9bb440912c23d532772f958'
+        'mupdf-0002-make-sure-that-number-of-colors-in-mesh-params-is-valid.patch::http://git.ghostscript.com/?p=mupdf.git;a=patch;h=39b0f07dd960f34e7e6bf230ffc3d87c41ef0f2e'
         'mupdf.desktop'
         'mupdf.xpm')
 md5sums=('658b90788a57d858dcb069cf326e11c3'
          'c2d096ecd41ae26735551d01099c0a3e'
-         '5fb16881b14c686a44957ec53f7fa924'
+         'cc0d5363bf0fd4daa46380f3799e1d16'
+         'f73ad47c6d57aa6cc6fcfbc9aa98465f'
          '39b54f82a763aac54e352315a0ee9037'
          'f3f35e7320bafde331250de1c99186a1')
 
@@ -40,6 +42,11 @@
   # https://security-tracker.debian.org/tracker/CVE-2016-6265
   patch -Np1 < "${srcdir}/mupdf-0001-bug-696941-fix-use-after-free.patch"
 
+  # Make sure that number of colors in mesh params is valid.
+  # CVE-2016-6525
+  # https://security-tracker.debian.org/tracker/CVE-2016-6525
+  patch -Np1 < "${srcdir}/mupdf-0002-make-sure-that-number-of-colors-in-mesh-params-is-valid.patch"
+
   # fix function for openjpeg 2.1.x
   patch -Np1 < "${srcdir}/0001-mupdf-openjpeg.patch"