File libpng12-0.changes of Package libpng12-0
-------------------------------------------------------------------
Thu Apr 12 13:31:15 UTC 2012 - lijewski.stefan@zabka.pl
- updated to 1.2.49:
* fixed CVE-2011-3048 [bnc#754745]
-------------------------------------------------------------------
Mon Apr 2 06:49:38 UTC 2012 - lijewski.stefan@zabka.pl
- updated to 1.2.48:
* fixed CVE-2011-3045 [bnc#752008]
-------------------------------------------------------------------
Wed Feb 29 10:00:16 UTC 2012 - johann.luce@wanadoo.fr
- update to 1.2.47, fixes:
*A heap-based buffer overflow in libpng was fixed that could
potentially be exploited by attackers to execute arbitrary
code or cause an application to crash (CVE-2011-3026).
-------------------------------------------------------------------
Thu Aug 18 05:06:23 UTC 2011 - lijewski.stefan@gmail.com
- update to 1.2.46, fixes:
* CVE-2011-2501 [bnc#702578]
* CVE-2011-2690 [bnc#706387]
* CVE-2011-2691 [bnc#706388]
* CVE-2011-2692 [bnc#706389]
-------------------------------------------------------------------
Tue Aug 24 18:50:42 CEST 2010 - pgajdos@suse.cz
- fixed [bnc#617866]
* memory leak CVE-2010-2249
* out of bounds write to memory CVE-2010-1205
-------------------------------------------------------------------
Tue Mar 9 10:00:39 CET 2010 - pgajdos@suse.cz
- Defending Libpng Applications Against Decompression Bombs
[bnc#580484]
http://libpng.sourceforge.net/decompression_bombs.html
* CVE-2010-0205.patch
- refreshed setjmp.diff using quilt
-------------------------------------------------------------------
Thu Aug 13 15:56:07 CEST 2009 - pgajdos@suse.cz
- updated to 1.2.39:
* Added a prototype for png_64bit_product() in png.c
* Avoid a possible NULL dereference in debug build,
in png_set_text_2()
* Relocated new png_64_bit_product() prototype into png.h
* Replaced *.tar.lzma with *.txz in distribution.
* Reject attempt to write iCCP chunk with negative embedded
profile length.
-------------------------------------------------------------------
Mon Jul 20 13:59:43 CEST 2009 - pgajdos@suse.cz
- updated to 1.2.38:
* Revised libpng*.txt and libpng.3 to mention calling png_set_IHDR()
multiple times and to specify the sample order in the tRNS chunk,
because the ISO PNG specification has a typo in the tRNS table.
* Changed several PNG_UNKNOWN_CHUNK_SUPPORTED to
PNG_HANDLE_AS_UNKNOWN_SUPPORTED, to make the png_set_keep mechanism
available for ignoring known chunks even when not saving unknown chunks.
* Adopted preference for consistent use of "#ifdef" and "#ifndef" versus
"#if defined()" and "if !defined()" where possible.
* Added PNG_NO_HANDLE_AS_UNKNOWN in the PNG_LEGACY_SUPPORTED block of
pngconf.h, and moved the various unknown chunk macro definitions
outside of the PNG_READ|WRITE_ANCILLARY_CHUNK_SUPPORTED blocks.
-------------------------------------------------------------------
Thu Jun 4 15:16:17 CEST 2009 - pgajdos@suse.cz
- updated to 1.2.37:
* fixed bug with new png_memset() of the big_row_buffer
-------------------------------------------------------------------
Tue May 12 17:38:21 CEST 2009 - pgajdos@suse.cz
- updated to 1.2.36 (see CHANGES)
-------------------------------------------------------------------
Mon Feb 23 11:20:10 CET 2009 - pgajdos@suse.cz
- fixes possible double free [bnc#472745]
(CVE-2009-0040)
-------------------------------------------------------------------
Mon Jan 19 09:18:12 CET 2009 - pgajdos@suse.cz
- updated to 1.2.34:
* fixes CVE-2008-3964 (removed CVE-2008-3964.patch)
-------------------------------------------------------------------
Tue Jan 13 12:34:56 CET 2009 - olh@suse.de
- obsolete old -XXbit packages (bnc#437293)
-------------------------------------------------------------------
Mon Sep 15 17:46:06 CEST 2008 - pgajdos@suse.cz
- fixed CVE-2008-3964 [bnc#424739]
* CVE-2008-3964.patch
-------------------------------------------------------------------
Thu Sep 11 14:23:49 CEST 2008 - pgajdos@suse.cz
- updated to version 1.2.31:
* coding bugfixes and enhancements
-------------------------------------------------------------------
Mon Sep 1 14:08:17 CEST 2008 - aj@suse.de
- Do not package la files.
-------------------------------------------------------------------
Mon Jun 23 19:17:51 CEST 2008 - pgajdos@suse.cz
- updated to 1.2.29:
* fixes to the configure-related build-scripts
* security fix that affects programs that attempt to do
special handling of unknown PNG chunks (presumably very
few such programs), along with a reversion to previous
behavior for handling of images with out-of-range tRNS-chunk
values [bnc#378634]
* fix for unintentional gray-to-RGB conversion in
png_set_expand_gray_1_2_4_to_8()
* various other minor fixes
- removed makefile-am.patch, issue fixed upstream
-------------------------------------------------------------------
Sun May 11 12:16:53 CEST 2008 - coolo@suse.de
- fix rename of xxbit packages
-------------------------------------------------------------------
Tue Apr 22 15:17:41 CEST 2008 - pgajdos@suse.cz
- $(ECHO) substituted by echo in Makefile.in -- fixes package
build in beta (makefile-am.patch)
-------------------------------------------------------------------
Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de
- added baselibs.conf file to build xxbit packages
for multilib support
-------------------------------------------------------------------
Thu Apr 3 13:05:17 CEST 2008 - pgajdos@suse.cz
- updated to 1.2.26:
* fixed minor coding errors that could lead to crashes in
exceptional cases
-------------------------------------------------------------------
Thu Dec 6 02:20:12 CET 2007 - mrueckert@suse.de
- added provides/obsoletes for the old package
-------------------------------------------------------------------
Fri Nov 30 13:13:50 CET 2007 - nadvornik@suse.cz
- updated to 1.2.23:
* more sanity checks, fixes [#332249]
- adjusted to Shared Library Policy:
* renamed package libpng to libpng12-0
* created compatibility package libpng3
-------------------------------------------------------------------
Wed Jul 11 15:27:52 CEST 2007 - nadvornik@suse.cz
- updated to 1.2.18:
* security fixes merged upstream
-------------------------------------------------------------------
Thu Mar 29 09:20:57 CEST 2007 - aj@suse.de
- Add zlib-devel to BuildRequires.
-------------------------------------------------------------------
Thu Nov 23 18:47:29 CET 2006 - nadvornik@suse.cz
- fixed crash on malformed sPLT chunks CVE-2006-5793 [#219007]
-------------------------------------------------------------------
Mon Jul 17 17:30:52 CEST 2006 - nadvornik@suse.cz
- make sure PNG_NO_ASSEMBLER_CODE is used consistently
-------------------------------------------------------------------
Thu Jun 29 19:30:05 CEST 2006 - nadvornik@suse.cz
- updated to 1.2.12:
* fixed possible buffer overflow [#189241]
-------------------------------------------------------------------
Wed Jun 21 18:21:29 CEST 2006 - nadvornik@suse.cz
- updated to 1.2.10:
* use autoconf
* many bugfixes
- libpng12-config no longer gives -Wl,-rpath,/usr/lib [#168627]
- spec file cleanup
-------------------------------------------------------------------
Fri Feb 24 10:53:43 CET 2006 - nadvornik@suse.cz
- removed libpng-64bit.diff [#153106]
-------------------------------------------------------------------
Wed Jan 25 21:30:25 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Thu Jan 12 16:30:10 CET 2006 - nadvornik@suse.cz
- compile with -fstack-protector
-------------------------------------------------------------------
Mon Oct 10 14:59:41 CEST 2005 - nadvornik@suse.cz
- fixed incorrect inline asm usage
-------------------------------------------------------------------
Thu May 19 03:14:59 CEST 2005 - ro@suse.de
- fix libdir in pkgconfig file libpng.pc
-------------------------------------------------------------------
Thu Jan 20 17:34:57 CET 2005 - nadvornik@suse.cz
- updated to 1.2.8:
* fixed crash of applications that strip the alpha channel
* fixed invalid zlib header within the PNG datastream
-------------------------------------------------------------------
Mon Sep 27 10:45:21 CEST 2004 - sf@suse.de
- fixed problem with wrong assumption for long on 64bit archs
which prevents khunphan from working (#45738)
-------------------------------------------------------------------
Wed Aug 25 11:11:53 CEST 2004 - kukuk@suse.de
- Avoid /bin/sh PreRequires
-------------------------------------------------------------------
Mon Aug 16 12:19:02 CEST 2004 - nadvornik@suse.cz
- updated to 1.2.6: included security fixes
-------------------------------------------------------------------
Mon Jul 19 14:15:38 CEST 2004 - nadvornik@suse.cz
- fixed several buffer overflows [#43008]
-------------------------------------------------------------------
Wed Jun 16 18:31:10 CEST 2004 - nadvornik@suse.cz
- added missing part of pngtran overflow patch [#42043]
-------------------------------------------------------------------
Fri Apr 23 16:39:48 CEST 2004 - nadvornik@suse.cz
- fixed reading behind end of string [#39180]
-------------------------------------------------------------------
Sat Jan 10 22:28:23 CET 2004 - adrian@suse.de
- build as user
-------------------------------------------------------------------
Fri Oct 10 16:58:23 CEST 2003 - adrian@suse.de
- add %run_ldconfig
-------------------------------------------------------------------
Tue Apr 8 01:34:48 CEST 2003 - ro@suse.de
- fix tail calling syntax
-------------------------------------------------------------------
Mon Feb 10 11:52:13 CET 2003 - nadvornik@suse.cz
- link the shared library with -lz -lm -lc again
-------------------------------------------------------------------
Wed Jan 29 10:04:20 CET 2003 - kukuk@suse.de
- Fix libpng-devel requires (add zlib-devel) [Bug #23154]
-------------------------------------------------------------------
Fri Jan 24 14:21:07 CET 2003 - sbrabec@suse.cz
- Added missing pkgconfig files to %files.
-------------------------------------------------------------------
Tue Jan 07 11:29:11 CET 2003 - nadvornik@suse.cz
- updated to 1.2.5
- fixed buffer overflow
-------------------------------------------------------------------
Wed Jul 31 11:05:50 CEST 2002 - coolo@suse.de
- fix libz dependency, so the resulting libpng is self containing
-------------------------------------------------------------------
Fri Jul 26 21:21:24 CEST 2002 - adrian@suse.de
- fix neededforbuild
-------------------------------------------------------------------
Wed Jul 24 17:32:50 CEST 2002 - nadvornik@suse.cz
- updated to 1.2.4:
- fixed buffer overflow in pngpread.c when IDAT is
corrupted with extra data
-------------------------------------------------------------------
Fri Jul 12 16:20:53 CEST 2002 - schwab@suse.de
- Fix makefile.
-------------------------------------------------------------------
Fri Jul 5 10:41:39 CEST 2002 - kukuk@suse.de
- Use %ix86 macro
-------------------------------------------------------------------
Tue Jul 2 09:44:15 CEST 2002 - nadvornik@suse.cz
- updated to 1.2.3
- changed package version to match the version of source tarball
-------------------------------------------------------------------
Tue Mar 5 10:38:31 CET 2002 - nadvornik@suse.cz
- fixed permissions for man pages
-------------------------------------------------------------------
Tue Feb 5 11:47:48 CET 2002 - nadvornik@suse.cz
- added Provides: libpng:/usr/include/png.h to libpng-devel
-------------------------------------------------------------------
Thu Jan 31 14:10:01 CET 2002 - nadvornik@suse.cz
- back to 1.0.12, libpng 1.2.x will be packed in separate package
- created devel subpackage to allow parallel instalation of
shared libraries
-------------------------------------------------------------------
Wed Jan 9 11:33:09 CET 2002 - nadvornik@suse.cz
- update to 1.2.1
- used macros %{_lib} and %{_libdir}
-------------------------------------------------------------------
Tue Dec 4 15:23:50 CET 2001 - nadvornik@suse.cz
- update to 1.2.0
- shared library version changed to 3.1.2.0
- new API for dynamically enabling and disabling certain optimizations
- added Provides: libpng-devel for compatibility [bug #11978]
-------------------------------------------------------------------
Tue Jul 17 12:29:40 CEST 2001 - nadvornik@suse.cz
- update to 1.0.12
-------------------------------------------------------------------
Tue Apr 3 10:11:24 CEST 2001 - nadvornik@suse.cz
- update to 1.0.10
- used pnggccrd.c - MMX support on intel
-------------------------------------------------------------------
Tue Feb 13 14:26:47 CET 2001 - nadvornik@suse.cz
- update to 1.0.9
-------------------------------------------------------------------
Fri Jan 19 17:13:11 CET 2001 - bk@suse.de
- call pngtest program to have some tests that libpng works.
- don't remove -O3 when adding RPM_OPT_FLAGS(still do -O3 optimisations)
-------------------------------------------------------------------
Thu Jan 4 09:23:32 CET 2001 - nadvornik@suse.cz
- changed rpm version to 2.1.0.8 (bug #5062)
- changed shared library name to libpng.so.2.1.0.8
-------------------------------------------------------------------
Wed Aug 23 12:01:11 CEST 2000 - nadvornik@suse.cz
- update to 1.0.8
-------------------------------------------------------------------
Tue Jul 11 15:40:08 CEST 2000 - adrian@suse.de
- seg fault fix in pngrutil.c
-------------------------------------------------------------------
Mon May 22 10:06:19 CEST 2000 - nadvornik@suse.cz
- changed group
- changed URL
-------------------------------------------------------------------
Sat Apr 29 22:31:13 CEST 2000 - kukuk@suse.de
- Make sure libpng.so.2 is linked against libz to avoid problems
with missing dependencies.
-------------------------------------------------------------------
Mon Apr 10 16:35:05 CEST 2000 - nadvornik@suse.cz
- added URL
-------------------------------------------------------------------
Tue Apr 4 15:16:50 CEST 2000 - nadvornik@suse.cz
- update to 1.0.6
- added BuildRoot
-------------------------------------------------------------------
Tue Jan 25 16:59:36 CET 2000 - ro@suse.de
- update to 1.0.5
- manpages to /usr/share using macro
-------------------------------------------------------------------
Mon Sep 13 17:23:57 CEST 1999 - bs@suse.de
- ran old prepare_spec on spec file to switch to new prepare_spec.
-------------------------------------------------------------------
Tue Jun 29 12:25:16 MEST 1999 - ro@suse.de
- moved from /usr/X11R6 to /usr
-------------------------------------------------------------------
Mon Jun 28 16:09:53 MEST 1999 - ro@suse.de
- update to 1.0.3
-------------------------------------------------------------------
Wed Feb 17 10:33:29 MET 1999 - ro@suse.de
- added .so.2 link
-------------------------------------------------------------------
Fri Jan 22 20:08:44 MET 1999 - ro@suse.de
- bump version to 2.1.0 (the version of the installed library)
-------------------------------------------------------------------
Fri Mar 20 14:32:55 MET 1998 - ro@suse.de
- extracted package from libgr tree
update to version 1.0.1
