- updated to 1.4.11: [bnc#754745]
  Revised png_set_text_2() to avoid potential memory corruption (fixes
    CVE-2011-3048).
  Prevent PNG_EXPAND+PNG_SHIFT doing the shift twice.

- updated to 1.4.10:
  * fixed CVE-2011-3045 [bnc#752008]

- updated to 1.4.9:
  * fixed CVE-2011-3026 [bnc#747311]

- Don't use a macro in name field 

- add libtool as buildrequire to avoid implicit dependency

- cross-build fix: use %configure macro

- updated to 1.4.8:
  * fixed CVE-2011-2501 [bnc#702578]

- updated to 1.4.7:
  * Fixed bug in background transformation handling in pngrtran.c
  * Fixed misspelled macros in contrib/pngminim
  * Fixed some typecasts in png_debug statements
  * see more in CHANGES file

- updated to 1.4.5:
  * Check for out-of-range text compression mode in png_set_text().
  * Revised png_get_uint_32, png_get_int_32, png_get_uint_16.
  * Moved reading of file signature into png_read_sig.

• Browse Source