- build with PNG_SAFE_LIMITS_SUPPORTED [bnc#912076], [bnc#912929]

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- updated to 1.6.16:
  * Restored a test on width that was removed from png.c at libpng-1.6.9
    (Bug report by Alex Eubanks).
  * Fixed an overflow in png_combine_row with very wide interlaced images.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- updated to 1.6.15:
  * Avoid out-of-bounds memory access in png_user_version_check().
  * Fixed incorrect handling of the iTXt compression.
  * Free all allocated memory in pngimage.
  * Fixed array size calculations to avoid warnings.
  etc. see ANNOUNCE

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- updated to 1.6.13: a "cleanup" release that have no security
  fixes or new features.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- removed libpng16-1.6.9-CVE-2014-0333.patch (upstreamed)

• Files Changed
• Browse Source

- updated to 1.6.12:
  * bugfixes, almost build-related only

• Files Changed
• Browse Source

- updated to 1.6.11:
  * fixed CVE-2014-0333 
  * other bugfixes
- removed libpng16-1.6.6-CVE-2014-0333.patch (upstreamed)

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- fixed CVE-2014-0333 [bnc#866298]
- added patches:
  * libpng16-1.6.6-CVE-2014-0333.patch

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- updated to 1.6.9:
  Bookkeeping: Moved functions around (no changes). Moved transform
    function definitions before the place where they are called so that
    they can be masde static. Move the intrapixel functions and the
    grayscale palette builder out of the png?tran.c files. The latter
    isn't a transform function and is no longer used internally, and the
    former MNG specific functions are better placed in pngread/pngwrite.c
  Made transform implementation functions static. This makes the internal
    functions called by png_do_{read|write}_transformations static. On an
    x86-64 DLL build (Gentoo Linux) this reduces the size of the text
    segment of the DLL by 1208 bytes, about 0.6%. It also simplifies
    maintenance by removing the declarations from pngpriv.h and allowing
    easier changes to the internal interfaces.
  Rebuilt configure scripts with automake-1.14.1 and autoconf-2.69
    in the tar distributions.
  Added checks for libpng 1.5 to pngvalid.c.  This supports the use of
    this version of pngvalid in libpng 1.5
  Merged with pngvalid.c from libpng-1.7 changes to create a single
    pngvalid.c
  Merged pngrio.c, pngtrans.c, pngwio.c, and pngerror.c with libpng-1.7.0
  Merged libpng-1.7.0 changes to make no-interlace configurations work
    with test programs.
  Revised pngvalid.c to support libpng 1.5, which does not support the
    PNG_MAXIMUM_INFLATE_WINDOW option, so #define it out when appropriate
    in pngvalid.c
  Allow unversioned links created on install to be disabled in configure.
    In configure builds 'make install' changes/adds links like png.h
    and libpng.a to point to the newly installed, versioned, files (e.g.
    libpng17/png.h and libpng17.a). Three new configure options and some
    rearrangement of Makefile.am allow creation of these links to be

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- updated to 1.6.8:
  Changed #ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED in pngpread.c to
    #ifdef PNG_SET_UNKNOWN_CHUNKS_SUPPORTED to be consistent with
    what is in pngpriv.h.
  Moved prototype for png_handle_unknown() in pngpriv.h outside of
    the #ifdef PNG_SET_UNKNOWN_CHUNKS_SUPPORTED/#endif block.
  Enabled WRITE_INVERT and WRITE_PACK in contrib/pngminim/encoder.
  Fixed pngvalid 'fail' function declaration on the Intel C Compiler.
    This reverts to the previous 'static' implementation and works round
    the 'unused static function' warning by using PNG_UNUSED().
  Handle zero-length PLTE chunk or NULL palette with png_error()
    instead of png_chunk_report(), which by default issues a warning
    rather than an error, leading to later reading from a NULL pointer
    (png_ptr->palette) in png_do_expand_palette(). This is CVE-2013-6954
    and VU#650142.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- png_fix macro doesn't leave *.png.fixed (which happened for correct
  PNGs) [bnc#852862]

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source