Upgrade advancecomp to 2.5 CVE-2023-2961 (#6177)

Co-authored-by: CBL-Mariner Servicing Account <cblmargh@microsoft.com>

SPECS-EXTENDED/advancecomp/advancecomp.signatures.json

@@ -1,5 +1,5 @@
 {
- "Signatures": {
-  "advancecomp-2.4.tar.gz": "eed4f31e4cd49cb18587f47a0af844b69340b2424e03a50eb60650befe93fdab"
- }
+  "Signatures": {
+    "advancecomp-2.5.tar.gz": "b6b4333453f028565896dd3547bc930f062df82832d7992cc130ca951c2890a1"
+  }
 }

SPECS-EXTENDED/advancecomp/advancecomp.spec

@@ -1,7 +1,7 @@
 Summary:        Recompression utilities for .png, .mng, .zip and .gz files
 Name:           advancecomp
-Version:        2.4
-Release:        2%{?dist}
+Version:        2.5
+Release:        1%{?dist}
 # Source file headers all specify GPL-2.0-or-later (see source file headers),
 # except:
 #
@@ -132,6 +132,9 @@ export LDFLAGS="-lzopfli ${LDFLAGS-}"
 %{_mandir}/man1/adv{def,mng,png,zip}.1*
 
 %changelog
+* Tue Sep 05 2023 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 2.5-1
+- Auto-upgrade to 2.5 - CVE-2023-2961
+
 * Wed Jan 18 2023 Suresh Thelkar <sthelkar@microsoft.com> - 2.4-2
 - Initial CBL-Mariner import from Fedora 36 (license: MIT)
 - License verified

cgmanifest.json

@@ -95,8 +95,8 @@
         "type": "other",
         "other": {
           "name": "advancecomp",
-          "version": "2.4",
-          "downloadUrl": "https://github.com/amadvance/advancecomp/archive/v2.4/advancecomp-2.4.tar.gz"
+          "version": "2.5",
+          "downloadUrl": "https://github.com/amadvance/advancecomp/archive/v2.5/advancecomp-2.5.tar.gz"
         }
       }
     },