Bug 32318

Summary:	pngcrush report inconsistent source files versions
Product:	Mageia	Reporter:	Raoul <raoul.behrend>
Component:	RPM Packages	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	minor
Priority:	Normal	CC:	fri, geiger.david68210, marja11, sysadmin-bugs
Version:	9	Keywords:	advisory, validated_update
Target Milestone:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:	MGA9-64-OK
Source RPM:	pngcrush-1.8.13-4.mga9.src.rpm	CVE:
Status comment:

Description Raoul 2023-09-25 00:26:31 CEST

I'm using pngcrush.
The package is labelled 1.8.13-4
When run, pngcrush gives

Warning: versions are different between png.h and png.c
  png.h version: 1.6.37
  png.c version: 1.6.38

Are all the source files up to date ?

Comment 1 Morgan Leijström 2023-09-25 06:52:54 CEST

I see a new version pngcrush-1.8.13-4.1.mga9 was built in core updates testing two hours ago, can you test that?

CC: (none) => fri
Summary: Strange version numbers => pngcrush report inconsistent source files versions

Comment 2 Morgan Leijström 2023-09-25 20:36:19 CEST

Test OK, ran it on a small png.

Old version reports like in Description,
updated version do not complain.

We need an advisory

CC: (none) => sysadmin-bugs
Assignee: bugsquad => qa-bugs
Whiteboard: (none) => MGA9-64-OK
Keywords: (none) => validated_update

Comment 3 David GEIGER 2023-09-26 04:18:22 CEST

Advisory:
=========
This update fixes a libpng mismatch version between our current libpng 1.6.38 and the last one where
pngcrush was built during the mga9 cycle development 1.6.37.


Packages in 9/Core/Updates_testing:
======================
pngcrush-1.8.13-4.1.mga9


From SRPMS:
pngcrush-1.8.13-4.1.mga9.src.rpm

CC: (none) => geiger.david68210

Marja Van Waes 2023-09-30 16:42:59 CEST

Keywords: (none) => advisory
CC: (none) => marja11

Comment 4 Mageia Robot 2023-09-30 21:18:18 CEST

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGAA-2023-0082.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED