- Tue Jun 18 2019 ns80 <ns80> 1.3.32-1.mga6
+ Revision: 1400227
- new version 1.3.32 (mga#24966)
- add patches for CVE-2019-1100[5-9], CVE-2019-11010, CVE-2019-1147[34] and CVE-2019-1150[56] (mga#24766)
- add patch from openSUSE for CVE-2019-7397 (mga#24396)
- new version 1.3.27 that corrects many security issues (mga#21600)
+ mrambo3501
- add upsteam patch which fixes CVE-2108-20185 (mga#24103)
- add upsteam patch which fixes CVE-2108-2018[49] (mga#24103)
+ kekepower
- Update to version 1.3.31 to fix several security issues (mga#23157)
- Rediffed Patch1
- Update to version 1.3.30
- Fixes CVE-2016-2317 (mga#23157)
- Update to version 1.3.29
- Fixes several security issues (mga#22403)
- Update to version 1.3.28 (mga#22403)
- Security fix: BMP: Fix non-terminal loop due to unexpected bit-field mask value (DOS opportunity).
- Security fix: PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
- Security fix: SetNexus() Fix heap overwrite under certain conditions due to using a wrong destination buffer. This issue impacts all 1.3.X releases.
- Security fix: TIFF: Fix heap buffer read overflow in LocaleNCompare() when parsing NEWS profile.
- Update to version 1.3.27a
- Update Source0 link
+ neoclust
- Make sure mageia 5 packages do not have higher release than mga6 ones
- Add P103 - Fixes CVE-2017-12937 (mga#21564)
- Add P102 - Fixes CVE-2017-12936 (mga#21564)
- Add P101 - Fixes CVE-2017-12935 (mga#21564)
+ akien
- Fix use-after-free crash (CVE-2017-11403)
- Version 1.3.26, many security fixes (mga#19668) - Mon May 1 2017 neoclust <neoclust> 1.3.25-5.mga6
+ Revision: 1098212
- Add P7 - Fixes CVE-2017-6335 (mga#19668) - Mon Oct 17 2016 ns80 <ns80> 1.3.25-4.mga6
+ Revision: 1061260
- add upstream patches for CVE-2016-868[2-4] (mga#19602) - Sat Oct 8 2016 ns80 <ns80> 1.3.25-3.mga6
+ Revision: 1059650
- add an upstream patch for two issues in the WPG reader - Tue Oct 4 2016 ns80 <ns80> 1.3.25-2.mga6
+ Revision: 1058618
- add a patch for CVE-2016-7800 (mga#19506) - Wed Sep 7 2016 luigiwalser <luigiwalser> 1.3.25-1.mga6
+ Revision: 1050336
- 1.3.25
- remove upstream patch 2 - Wed Jun 22 2016 luigiwalser <luigiwalser> 1.3.24-2.mga6
+ Revision: 1037188
- add upstream patch to fix more svg security issues
