- Fri Jul 2 2010 Paul Howarth <paul@city-fan.org> 1.0.54-1
- update to 1.0.54
- fixes CVE-2010-1205 (out-of-bounds write to memory)
- fixes CVE-2010-2249 (memory leak with images having malformed sCAL chunks) - Thu Feb 25 2010 Paul Howarth <paul@city-fan.org> 1.0.53-1
- update to 1.0.53
- fixes CVE-2010-0205 (libpng stalls on highly compressed ancillary chunks)
- drop patch for #555485, included upstream - Thu Jan 7 2010 Paul Howarth <paul@city-fan.org> 1.0.52-2
- add upstream fix reinstating PNG_READ_16_TO_8_SUPPORTED and
PNG_READ_GRAY_TO_RGB_SUPPORTED (not defined in 1.0.51 and 1.0.52),
causing API/ABI regressions (#555485) - Mon Jan 4 2010 Paul Howarth <paul@city-fan.org> 1.0.52-1
- update to 1.0.52 (minor changes, see ANNOUNCE for details)
- Thu Dec 3 2009 Paul Howarth <paul@city-fan.org> 1.0.51-1
- update to 1.0.51 (see ANNOUNCE for details)
- update soname patch to apply to 1.0.51 - Fri Sep 11 2009 Paul Howarth <paul@city-fan.org> 1.0.50-1
- update to 1.0.50 (garbage removal patch upstreamed)
- Thu Sep 10 2009 Paul Howarth <paul@city-fan.org> 1.0.49-1
- update to 1.0.49 (minor bugfixes)
- patch out garbage in source files left over from edit gone wrong - Thu Aug 13 2009 Paul Howarth <paul@city-fan.org> 1.0.48-1
- update to 1.0.48
- avoid a possible NULL dereference in debug build, in png_set_text_2()
- reject attempt to write iCCP chunk with negative embedded profile length
- rebase soname patch to remove fuzz - Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 1.0.47-2
- rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
- Fri Jul 17 2009 Paul Howarth <paul@city-fan.org> 1.0.47-1
- update to 1.0.47 (changes to unknown chunk handling and documentation)
- Thu Jun 18 2009 Paul Howarth <paul@city-fan.org> 1.0.46-1
- garbage removal patch upstreamed
- Thu Jun 18 2009 Paul Howarth <paul@city-fan.org> 1.0.45-2
- patch out garbage in devel config files left over from edit gone wrong
- Thu Jun 4 2009 Paul Howarth <paul@city-fan.org> 1.0.45-1
- update to 1.0.45 (mainly cosmetic code changes)
- Fri May 8 2009 Paul Howarth <paul@city-fan.org> 1.0.44-1
- update to 1.0.44 (fix possible UMR/memory leak issues, revise fflush() usage)
- Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 1.0.43-2
- rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
- Thu Feb 19 2009 Paul Howarth <paul@city-fan.org> 1.0.43-1
- update to 1.0.43 (#486355, CVE-2009-0040 - clear pointer arrays created using
png_malloc()) - Fri Dec 19 2008 Paul Howarth <paul@city-fan.org> 1.0.42-1
- update to 1.0.42 (#480321, CVE-2008-5907 - various minor bugfixes and code
cleanups, not really a security issue) - Fri Oct 31 2008 Paul Howarth <paul@city-fan.org> 1.0.41-1
- update to 1.0.41 (#468990, CVE-2008-6218 - memory leak after reading a
malformed tEXt chunk) - Fri Sep 19 2008 Paul Howarth <paul@city-fan.org> 1.0.40-1
- update to 1.0.40 (#461599, CVE-2008-3964 - multiple off-by-one errors
allowing context-dependent attackers to cause a denial of service (crash) or
have unspecified other impact via a PNG image with crafted zTXt chunks) - Thu Aug 21 2008 Paul Howarth <paul@city-fan.org> 1.0.39-1
- update to 1.0.39
- Sun Aug 17 2008 Paul Howarth <paul@city-fan.org> 1.0.38-1
- update to 1.0.38
- update soname patch to apply without fuzz - Fri May 9 2008 Paul Howarth <paul@city-fan.org> 1.0.37-1
- update to 1.0.37
- autotools patch no longer needed
- explicitly specify the library filename in %files as a consistency check - Wed Apr 30 2008 Paul Howarth <paul@city-fan.org> 1.0.34-1
- update to 1.0.34
- update autotools patch - Wed Apr 30 2008 Paul Howarth <paul@city-fan.org> 1.0.33-1
- update to 1.0.33 (CVE-2008-1382, #441839)
- add patch to fix broken autotools build scripts - Thu Apr 3 2008 Paul Howarth <paul@city-fan.org> 1.0.32-1
- update to 1.0.32
- Tue Feb 19 2008 Paul Howarth <paul@city-fan.org> 1.0.31-1
- update to 1.0.31
- Wed Feb 13 2008 Paul Howarth <paul@city-fan.org> 1.0.30-2
- rebuild with gcc 4.3.0 for Fedora 9
- Tue Oct 16 2007 Paul Howarth <paul@city-fan.org> 1.0.30-1
- update to 1.0.30
- Fri Oct 5 2007 Paul Howarth <paul@city-fan.org> 1.0.29-1
- update to 1.0.29 (fixes DoS issue, #327791, CVE-2007-5269)
- Tue Sep 11 2007 Paul Howarth <paul@city-fan.org> 1.0.28-1
- update to 1.0.28
- Mon Aug 20 2007 Paul Howarth <paul@city-fan.org> 1.0.27-1
- update to 1.0.27
- add new file ANNOUNCE, which lists changes since last release
- use shortname "zlib" for the license tag (package is zlib/libpng licensed)
- drop pkgconf patch, which should no longer be needed - Sun May 20 2007 Paul Howarth <paul@city-fan.org> 1.0.26-1
- update to 1.0.26 to address DoS issue (#240398, CVE-2007-2445)
- update soname patch
- libpng.txt now has a versioned filename - Sun Mar 25 2007 Paul Howarth <paul@city-fan.org> 1.0.21-2
- Own directory %{_docdir}/%{name}-%{version} (#233869)
- Describe license as "zlib/libpng" rather than just "zlib" - Sat Nov 18 2006 Paul Howarth <paul@city-fan.org> 1.0.21-1
- update to 1.0.21 to address DoS issue (#216263, CVE-2006-5793)
- update soname patch - Sun Oct 1 2006 Paul Howarth <paul@city-fan.org> 1.0.20-4
- rebuild with latest toolchain
- Tue Aug 1 2006 Paul Howarth <paul@city-fan.org> 1.0.20-3
- reenable %{_smp_mflags}
- use patched configure script rather than old Makefiles - Thu Jul 20 2006 Paul Howarth <paul@city-fan.org> 1.0.20-2
- don't use %{_smp_mflags}
- Thu Jul 6 2006 Paul Howarth <paul@city-fan.org> 1.0.20-1
- update to 1.0.20
- use Fedora Extras standard buildroot
- update URL
- include release in fully versioned dependency between devel and main pkgs
- wrap description text at 80 columns
- don't build static libraries
- devel package requires pkgconfig
- unpack tarball quietly
- update rhconf patch
- move doc files libpng.txt and example.c to devel package
- add doc Y2KINFO
- changed license tag from "OSI Certified" to "zlib License"
(see http://www.opensource.org/licenses/zlib-license.php)
- minor cosmetic spec file changes - Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.0.18-3.2.1
- bump again for double-long bug on ppc(64)
- Tue Feb 7 2006 Jesse Keating <jkeating@redhat.com> - 1.0.18-3.2
- rebuilt for new gcc4.1 snapshot and glibc changes
- Fri Dec 9 2005 Jesse Keating <jkeating@redhat.com>
- rebuilt
- Sun Jul 31 2005 Florian La Roche <laroche@redhat.com>
- build with newest rpm, rm -f libpng.so
- Wed Mar 2 2005 Matthias Clasen <mclasen@redhat.com> - 1.0.18-2
- Rebuild with gcc4
- Mon Dec 6 2004 Matthias Clasen <mclasen@redhat.com> - 1.0.18-1
- Update to 1.0.18
- Tue Aug 17 2004 Matthias Clasen <mclasen@redhat.com> - 1.0.16-1
- Update to 1.0.16
- Combine rhconf patches
- Include LICENSE - Wed Aug 4 2004 Matthias Clasen <mclasen@redhat.com> 1.0.15-9
- Build for FC3
- Fri Jul 23 2004 Matthias Clasen <mclasen@redhat.com> 1.0.15-8
- Build for FC2
- Fri Jul 23 2004 Matthias Clasen <mclasen@redhat.com> 1.0.15-7
- Replace the patches for individual security problems with the
cumulative patch issued by the png developers.
- Build for FC1 - Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
- Mon Jun 14 2004 Matthias Clasen <mclasen@redhat.com> - 1.0.15-5
- Rebuilt for FC2
- Mon Jun 14 2004 Matthias Clasen <mclasen@redhat.com> - 1.0.15-4
- Rebuilt for FC1
- Mon Jun 14 2004 Matthias Clasen <mclasen@redhat.com> - 1.0.15-3
- Reinstate and improve the transfix patch which got lost sometime ago,
but is still needed for CAN-2002-1363 (#125934) - Wed May 19 2004 Matthias Clasen <mclasen@redhat.com> 1.0.15-2
- Don't provide libpng-devel (#110161)
- Wed May 19 2004 Matthias Clasen <mclasen@redhat.com> 1.0.15-1
- 1.0.15
- Update rhconf2 patch
- Remove bogus badchunks patch (#89854) - Mon May 3 2004 Matthias Clasen <mclasen@redhat.com> 1.0.13-13
- Redo the out-of-bounds fix in a slightly better way.
- Wed Apr 21 2004 Matthias Clasen <mclasen@redhat.com> 1.0.13-12
- Bump release number to disambiguate n-v-rs.
- Mon Apr 19 2004 Matthias Clasen <mclasen@redhat.com>
- fix a possible out-of-bounds read in the error message
handler. #121229 - Tue Mar 2 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
- Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
- Mon Jun 9 2003 Elliot Lee <sopwith@redhat.com>
- This package has no epochs! remove usage thereof
- Wed Jun 4 2003 Elliot Lee <sopwith@redhat.com>
- rebuilt
- Tue Jun 3 2003 Jeff Johnson <jbj@redhat.com>
- add explicit epoch's where needed.
- Wed Jan 22 2003 Tim Powers <timp@redhat.com>
- rebuilt
- Wed Jan 15 2003 Elliot Lee <sopwith@redhat.com> 1.0.13-7
- Bump & rebuild
- Fri Dec 13 2002 Elliot Lee <sopwith@redhat.com> 1.0.13-6
- Rebuild, merging in multilib change
- Fri Jun 21 2002 Tim Powers <timp@redhat.com>
- automated rebuild
- Sun May 26 2002 Tim Powers <timp@redhat.com>
- automated rebuild
- Tue May 21 2002 Elliot Lee <sopwith@redhat.com> 1.0.13-3
- The package totally broke the backwards compatibility that it was intended to provide.
Fixed by setting soname to libpng.so.2, and only tweaking the build (libpng*.{so,a}) files.
- Use _smp_mflags
- Fix rhconf patch because it was patching a symlink instead of the actual file.
- Don't provide libpng = {version}, because then the package conflicts with itself - Thu May 9 2002 Jeremy Katz <katzj@redhat.com> 1.0.13-2
- rebuild
- Thu May 2 2002 Havoc Pennington <hp@redhat.com> 1.0.13-1
- upgrade to 1.0.13, plus patch tarball from libpng web site
- update rhconf patch to work with new makefiles - Mon Mar 4 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.0.12-6
- Revert fix for #59988 as it introduces a worse problem, #60410
- Tue Feb 26 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.0.12-5
- Conflict with libpng < 1.2.0 (#59988)
- Wed Jan 30 2002 Bill Nottingham <notting@redhat.com> 1.0.12-4
- provide libpng = %{version}, libpng-devel = %{version}
- Wed Jan 9 2002 Tim Powers <timp@redhat.com>
- automated rebuild
- Fri Jan 4 2002 Bill Nottingham <notting@redhat.com> 1.0.12-2
- add devel stuff (we may change this around later)
- Wed Sep 19 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.0.12-1
- initial compat package
