[ANNOUNCE] libXpm 3.5.12

Matthieu Herrb matthieu at herrb.eu
Thu Dec 15 18:55:33 UTC 2016


On Thu, Dec 15, 2016 at 10:26:41AM -0800, Matt Turner wrote:
> On Thu, Dec 15, 2016 at 9:08 AM, Matthieu Herrb <matthieu at herrb.eu> wrote:
> > Jörg Sonnenberger (1):
> >       Fix abs() usage.
> >
> > Matthieu Herrb (1):
> >       libXpm 3.5.12
> >
> > Tobias Stoeckmann (4):
> >       Fix out out boundary read on unknown colors
> >       Gracefully handle EOF while parsing files.
> >       Avoid OOB write when handling malicious XPM files.
> >       Handle size_t in file/buffer length
> >
> > git tag: libXpm-3.5.12
> >
> > https://xorg.freedesktop.org/archive/individual/lib/libXpm-3.5.12.tar.bz2
> > MD5:  20f4627672edb2bd06a749f11aa97302  libXpm-3.5.12.tar.bz2
> > SHA1: 4e22fefe61714209539b08051b5287bcd9ecfd04  libXpm-3.5.12.tar.bz2
> > SHA256: fd6a6de3da48de8d1bb738ab6be4ad67f7cb0986c39bd3f7d51dd24f7854bdec  libXpm-3.5.12.tar.bz2
> > PGP:  https://xorg.freedesktop.org/archive/individual/lib/libXpm-3.5.12.tar.bz2.sig
> >
> > https://xorg.freedesktop.org/archive/individual/lib/libXpm-3.5.12.tar.gz
> > MD5:  b286c884b11b5a0b4371175c5327141f  libXpm-3.5.12.tar.gz
> > SHA1: c837dfca61080a40031a3d9a83ea284acb619ab7  libXpm-3.5.12.tar.gz
> > SHA256: 2523acc780eac01db5163267b36f5b94374bfb0de26fc0b5a7bee76649fd8501  libXpm-3.5.12.tar.gz
> > PGP:  https://xorg.freedesktop.org/archive/individual/lib/libXpm-3.5.12.tar.gz.sig
> 
> Thanks for handling Tobias' patches and making a release.
> 
> I cannot download the new tarballs. I get a 403, and looking at the
> directory via ssh I see that the files have mode 600, which would
> explain it.

Fixed, thanks for the report.

I haven't tried to understand exactly how it happened, but this would
be a flaw in the 'release.sh' script that someow propagates the umask
of my local account up to annarchy.

-- 
Matthieu Herrb
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 793 bytes
Desc: not available
URL: <https://lists.x.org/archives/xorg/attachments/20161215/8aee85a0/attachment.sig>


More information about the xorg mailing list