rpms/libpng15
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Compare commits

base: rpms:c8
Branches Tags
rpms:c8
rpms:c9
rpms:c9s
rpms:c8s
rpms:c9-beta
rpms:c8-beta
rpms:c10s
rpms:imports/c9/libpng15-1.5.30-15.el9_8.1
rpms:imports/c8/libpng15-1.5.30-9.el8_10
rpms:imports/c8/libpng15-1.5.30-8.el8_10
rpms:imports/c9/libpng15-1.5.30-14.el9_7.1
rpms:imports/c8s/libpng15-1.5.30-7.el8
rpms:imports/c9/libpng15-1.5.30-14.el9
rpms:imports/c9-beta/libpng15-1.5.30-14.el9
rpms:imports/c8-beta/libpng15-1.5.30-7.el8
rpms:imports/c8/libpng15-1.5.30-7.el8
rpms:imports/c10s/libpng15-1.5.30-14.el10
..
compare: rpms:c9-beta
Branches Tags
rpms:c9
rpms:c8
rpms:c9s
rpms:c8s
rpms:c9-beta
rpms:c8-beta
rpms:c10s
rpms:imports/c9/libpng15-1.5.30-15.el9_8.1
rpms:imports/c8/libpng15-1.5.30-9.el8_10
rpms:imports/c8/libpng15-1.5.30-8.el8_10
rpms:imports/c9/libpng15-1.5.30-14.el9_7.1
rpms:imports/c8s/libpng15-1.5.30-7.el8
rpms:imports/c9/libpng15-1.5.30-14.el9
rpms:imports/c9-beta/libpng15-1.5.30-14.el9
rpms:imports/c8-beta/libpng15-1.5.30-7.el8
rpms:imports/c8/libpng15-1.5.30-7.el8
rpms:imports/c10s/libpng15-1.5.30-14.el10

No commits in common. "c8" and "c9-beta" have entirely different histories.
c8 ... c9-beta

7 changed files with 516 additions and 300 deletions
Show Stats Expand all files Collapse all files

77
SOURCES/libpng-1.6-CVE-2026-33416_p1of5.patch
View File

@ -1,77 +0,0 @@
--- libpng-1.5.30/pngread.c 2017-09-28 21:10:04.000000000 +0200
+++ libpng-1.5.30/pngread.c 2026-05-21 21:17:19.540923384 +0200
@@ -1056,9 +1056,11 @@ png_read_destroy(png_structp png_ptr, pn
#if defined(PNG_tRNS_SUPPORTED) || \
defined(PNG_READ_EXPAND_SUPPORTED) || defined(PNG_READ_BACKGROUND_SUPPORTED)
- if (png_ptr->free_me & PNG_FREE_TRNS)
- png_free(png_ptr, png_ptr->trans_alpha);
- png_ptr->free_me &= ~PNG_FREE_TRNS;
+ /* png_ptr->trans_alpha is always independently allocated (not aliased
+ * with info_ptr->trans_alpha), so free it unconditionally.
+ */
+ png_free(png_ptr, png_ptr->trans_alpha);
+ png_ptr->trans_alpha = NULL;
#endif
#ifdef PNG_READ_hIST_SUPPORTED
--- libpng-1.5.30/pngset.c 2026-05-21 21:15:27.664454789 +0200
+++ libpng-1.5.30/pngset.c 2026-05-21 21:18:03.395444070 +0200
@@ -1008,19 +1008,33 @@ png_set_tRNS(png_structp png_ptr, png_in
if (trans_alpha != NULL)
{
- /* It may not actually be necessary to set png_ptr->trans_alpha here;
- * we do it for backward compatibility with the way the png_handle_tRNS
- * function used to do the allocation.
- */
-
png_free_data(png_ptr, info_ptr, PNG_FREE_TRNS, 0);
- /* Changed from num_trans to PNG_MAX_PALETTE_LENGTH in version 1.2.1 */
- png_ptr->trans_alpha = info_ptr->trans_alpha =
- (png_bytep)png_malloc(png_ptr, (png_size_t)PNG_MAX_PALETTE_LENGTH);
-
if (num_trans > 0 && num_trans <= PNG_MAX_PALETTE_LENGTH)
+ {
+ /* Allocate info_ptr's copy of the transparency data. */
+ info_ptr->trans_alpha =
+ (png_bytep)png_malloc(png_ptr, (png_size_t)PNG_MAX_PALETTE_LENGTH);
png_memcpy(info_ptr->trans_alpha, trans_alpha, (png_size_t)num_trans);
+
+ /* Allocate an independent copy for png_struct, so that the
+ * lifetime of png_ptr->trans_alpha is decoupled from the
+ * lifetime of info_ptr->trans_alpha. Previously these two
+ * pointers were aliased, which caused a use-after-free if
+ * png_free_data freed info_ptr->trans_alpha while
+ * png_ptr->trans_alpha was still in use by the row transform
+ * functions (e.g. png_do_expand_palette).
+ */
+ png_free(png_ptr, png_ptr->trans_alpha);
+ png_ptr->trans_alpha =
+ (png_bytep)png_malloc(png_ptr, (png_size_t)PNG_MAX_PALETTE_LENGTH);
+ png_memcpy(png_ptr->trans_alpha, trans_alpha, (png_size_t)num_trans);
+ }
+ else
+ {
+ png_free(png_ptr, png_ptr->trans_alpha);
+ png_ptr->trans_alpha = NULL;
+ }
}
if (trans_color != NULL)
--- libpng-1.5.30/pngwrite.c 2017-09-28 21:10:04.000000000 +0200
+++ libpng-1.5.30/pngwrite.c 2026-05-21 21:18:14.420323571 +0200
@@ -977,6 +977,12 @@ png_write_destroy(png_structp png_ptr)
png_free(png_ptr, png_ptr->paeth_row);
#endif
+#if defined(PNG_tRNS_SUPPORTED)
+ /* Free the independent copy of trans_alpha owned by png_struct. */
+ png_free(png_ptr, png_ptr->trans_alpha);
+ png_ptr->trans_alpha = NULL;
+#endif
+
#ifdef PNG_SETJMP_SUPPORTED
/* Reset structure */
png_memcpy(tmp_jmp, png_ptr->longjmp_buffer, png_sizeof(jmp_buf));

25
SOURCES/libpng-1.6-CVE-2026-33416_p2of5.patch
View File

@ -1,25 +0,0 @@
--- libpng-1.5.30/pngset.c 2026-05-21 21:18:03.395444070 +0200
+++ libpng-1.5.30/pngset.c 2026-05-21 21:24:35.399291945 +0200
@@ -1012,9 +1012,13 @@ png_set_tRNS(png_structp png_ptr, png_in
if (num_trans > 0 && num_trans <= PNG_MAX_PALETTE_LENGTH)
{
- /* Allocate info_ptr's copy of the transparency data. */
+ /* Allocate info_ptr's copy of the transparency data.
+ * Initialize all entries to fully opaque (0xff), then overwrite
+ * the first num_trans entries with the actual values.
+ */
info_ptr->trans_alpha =
(png_bytep)png_malloc(png_ptr, (png_size_t)PNG_MAX_PALETTE_LENGTH);
+ png_memset(info_ptr->trans_alpha, 0xff, PNG_MAX_PALETTE_LENGTH);
png_memcpy(info_ptr->trans_alpha, trans_alpha, (png_size_t)num_trans);
/* Allocate an independent copy for png_struct, so that the
@@ -1028,6 +1032,7 @@ png_set_tRNS(png_structp png_ptr, png_in
png_free(png_ptr, png_ptr->trans_alpha);
png_ptr->trans_alpha =
(png_bytep)png_malloc(png_ptr, (png_size_t)PNG_MAX_PALETTE_LENGTH);
+ png_memset(png_ptr->trans_alpha, 0xff, PNG_MAX_PALETTE_LENGTH);
png_memcpy(png_ptr->trans_alpha, trans_alpha, (png_size_t)num_trans);
}
else

94
SOURCES/libpng-1.6-CVE-2026-33416_p3of5.patch
View File

@ -1,94 +0,0 @@
--- libpng-1.5.30/pngread.c 2026-05-21 21:17:19.540923384 +0200
+++ libpng-1.5.30/pngread.c 2026-05-21 21:32:04.901633911 +0200
@@ -1050,9 +1050,11 @@ png_read_destroy(png_structp png_ptr, pn
png_free(png_ptr, png_ptr->quantize_index);
#endif
- if (png_ptr->free_me & PNG_FREE_PLTE)
- png_zfree(png_ptr, png_ptr->palette);
- png_ptr->free_me &= ~PNG_FREE_PLTE;
+ /* png_ptr->palette is always independently allocated (not aliased
+ * with info_ptr->palette), so free it unconditionally.
+ */
+ png_free(png_ptr, png_ptr->palette);
+ png_ptr->palette = NULL;
#if defined(PNG_tRNS_SUPPORTED) || \
defined(PNG_READ_EXPAND_SUPPORTED) || defined(PNG_READ_BACKGROUND_SUPPORTED)
--- libpng-1.5.30/pngrtran.c 2026-05-21 21:15:27.667146120 +0200
+++ libpng-1.5.30/pngrtran.c 2026-05-21 21:51:26.488584634 +0200
@@ -698,7 +698,13 @@ png_set_quantize(png_structp png_ptr, pn
}
if (png_ptr->palette == NULL)
{
- png_ptr->palette = palette;
+ /* Allocate an owned copy rather than aliasing the caller's pointer,
+ * so that png_read_destroy can free png_ptr->palette unconditionally.
+ */
+ png_ptr->palette = (png_colorp)png_calloc(png_ptr,
+ PNG_MAX_PALETTE_LENGTH * png_sizeof(png_color));
+ png_memcpy(png_ptr->palette, palette, (unsigned int)num_palette *
+ png_sizeof(png_color));
}
png_ptr->num_palette = (png_uint_16)num_palette;
--- libpng-1.5.30/pngset.c 2026-05-21 21:24:35.399291945 +0200
+++ libpng-1.5.30/pngset.c 2026-05-21 21:51:26.572583763 +0200
@@ -607,22 +607,37 @@ png_set_PLTE(png_structp png_ptr, png_in
return;
}
- /* It may not actually be necessary to set png_ptr->palette here;
- * we do it for backward compatibility with the way the png_handle_tRNS
- * function used to do the allocation.
- */
png_free_data(png_ptr, info_ptr, PNG_FREE_PLTE, 0);
/* Changed in libpng-1.2.1 to allocate PNG_MAX_PALETTE_LENGTH instead
* of num_palette entries, in case of an invalid PNG file or incorrect
* call to png_set_PLTE() with too-large sample values.
+ *
+ * Allocate independent buffers for info_ptr and png_ptr so that the
+ * lifetime of png_ptr->palette is decoupled from the lifetime of
+ * info_ptr->palette. Previously, these two pointers were aliased,
+ * which caused a use-after-free vulnerability if png_free_data freed
+ * info_ptr->palette while png_ptr->palette was still in use by the
+ * row transform functions (e.g. png_do_expand_palette).
+ *
+ * Both buffers are allocated with png_calloc to zero-fill, because
+ * the ARM NEON palette riffle reads all 256 entries unconditionally,
+ * regardless of num_palette.
*/
+ png_free(png_ptr, png_ptr->palette);
png_ptr->palette = (png_colorp)png_calloc(png_ptr,
PNG_MAX_PALETTE_LENGTH * png_sizeof(png_color));
+ info_ptr->palette = (png_colorp)png_calloc(png_ptr,
+ PNG_MAX_PALETTE_LENGTH * png_sizeof(png_color));
+ png_ptr->num_palette = info_ptr->num_palette = (png_uint_16)num_palette;
- png_memcpy(png_ptr->palette, palette, num_palette * png_sizeof(png_color));
- info_ptr->palette = png_ptr->palette;
- info_ptr->num_palette = png_ptr->num_palette = (png_uint_16)num_palette;
+ if (num_palette > 0)
+ {
+ png_memcpy(info_ptr->palette, palette, (unsigned int)num_palette *
+ png_sizeof(png_color));
+ png_memcpy(png_ptr->palette, palette, (unsigned int)num_palette *
+ png_sizeof(png_color));
+ }
info_ptr->free_me |= PNG_FREE_PLTE;
--- libpng-1.5.30/pngwrite.c 2026-05-21 21:18:14.420323571 +0200
+++ libpng-1.5.30/pngwrite.c 2026-05-21 21:51:26.656582891 +0200
@@ -983,6 +983,10 @@ png_write_destroy(png_structp png_ptr)
png_ptr->trans_alpha = NULL;
#endif
+ /* Free the independent copy of the palette owned by png_struct. */
+ png_free(png_ptr, png_ptr->palette);
+ png_ptr->palette = NULL;
+
#ifdef PNG_SETJMP_SUPPORTED
/* Reset structure */
png_memcpy(tmp_jmp, png_ptr->longjmp_buffer, png_sizeof(jmp_buf));

24
SOURCES/libpng-1.6-CVE-2026-33416_p4of5.patch
View File

@ -1,24 +0,0 @@
--- libpng-1.5.30/pngrtran.c 2026-05-21 21:51:26.488584634 +0200
+++ libpng-1.5.30/pngrtran.c 2026-05-21 22:17:17.648501809 +0200
@@ -1895,6 +1895,21 @@ png_read_transform_info(png_structp png_
{
png_debug(1, "in png_read_transform_info");
+ if (png_ptr->transformations != 0)
+ {
+ if (info_ptr->color_type == PNG_COLOR_TYPE_PALETTE &&
+ info_ptr->palette != NULL && png_ptr->palette != NULL)
+ {
+ /* Sync info_ptr->palette with png_ptr->palette.
+ * The function png_init_read_transformations may have modified
+ * png_ptr->palette in place (e.g. for gamma correction or for
+ * background compositing).
+ */
+ png_memcpy(info_ptr->palette, png_ptr->palette,
+ PNG_MAX_PALETTE_LENGTH * png_sizeof(png_color));
+ }
+ }
+
#ifdef PNG_READ_EXPAND_SUPPORTED
if (png_ptr->transformations & PNG_EXPAND)
{

30
SOURCES/libpng-1.6-CVE-2026-33416_p5of5.patch
View File

@ -1,30 +0,0 @@
--- libpng-1.5.30/pngrtran.c 2026-05-21 22:17:17.648501809 +0200
+++ libpng-1.5.30/pngrtran.c 2026-05-21 22:18:11.383978646 +0200
@@ -1895,19 +1895,15 @@ png_read_transform_info(png_structp png_
{
png_debug(1, "in png_read_transform_info");
- if (png_ptr->transformations != 0)
+ if (info_ptr->color_type == PNG_COLOR_TYPE_PALETTE &&
+ info_ptr->palette != NULL && png_ptr->palette != NULL)
{
- if (info_ptr->color_type == PNG_COLOR_TYPE_PALETTE &&
- info_ptr->palette != NULL && png_ptr->palette != NULL)
- {
- /* Sync info_ptr->palette with png_ptr->palette.
- * The function png_init_read_transformations may have modified
- * png_ptr->palette in place (e.g. for gamma correction or for
- * background compositing).
- */
- png_memcpy(info_ptr->palette, png_ptr->palette,
- PNG_MAX_PALETTE_LENGTH * png_sizeof(png_color));
- }
+ /* Sync info_ptr->palette with png_ptr->palette, which may
+ * have been modified by png_init_read_transformations
+ * (e.g. for gamma correction or background compositing).
+ */
+ png_memcpy(info_ptr->palette, png_ptr->palette,
+ PNG_MAX_PALETTE_LENGTH * png_sizeof(png_color));
}
#ifdef PNG_READ_EXPAND_SUPPORTED

15
SOURCES/libpng-1.6-cve-2026-25646.patch
View File

@ -1,15 +0,0 @@
diff --git a/pngrtran.c b/pngrtran.c
index fe8f9d32c9..1fce9af121 100644
--- a/pngrtran.c
+++ b/pngrtran.c
@@ -708,8 +708,8 @@ png_set_quantize(png_structrp png_ptr, png_colorp palette,
break;
t->next = hash[d];
- t->left = (png_byte)i;
- t->right = (png_byte)j;
+ t->left = png_ptr->palette_to_index[i];
+ t->right = png_ptr->palette_to_index[j];
hash[d] = t;
}
}

551
SPECS/libpng15.spec
View File

@ -1,7 +1,7 @@
Summary: Old version of libpng, needed to run old binaries
Name: libpng15
Version: 1.5.30
Release: 9%{?dist}
Release: 14%{?dist}
License: zlib
URL: http://www.libpng.org/pub/png/
@ -13,26 +13,10 @@ Source1: pngusr.dfa
Patch0: libpng15-CVE-2013-6954.patch
Patch1: libpng15-CVE-2018-13785.patch
# from upstream, for <= 1.6.54, RHEL-148340
# https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88
Patch2: libpng-1.6-cve-2026-25646.patch
# from upstream, for <1.6.56 (fix), for <1.6.58 (regression fix), RHEL-161438
# https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb
Patch12: libpng-1.6-CVE-2026-33416_p1of5.patch
# https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25
Patch13: libpng-1.6-CVE-2026-33416_p2of5.patch
# https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667
Patch14: libpng-1.6-CVE-2026-33416_p3of5.patch
# https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1
Patch15: libpng-1.6-CVE-2026-33416_p4of5.patch
# regression fix for 7ea9eea8 (part 3)
# https://github.com/pnggroup/libpng/commit/d4c4e49eb5c8981075ec2cd946428758c0cda6ac
Patch16: libpng-1.6-CVE-2026-33416_p5of5.patch
BuildRequires: gcc
BuildRequires: zlib-devel
BuildRequires: make
%description
The libpng15 package provides libpng 1.5, an older version of the libpng.
@ -43,24 +27,18 @@ version of libpng.
%prep
%setup -q -n libpng-%{version}
%patch -P 0 -p1
%patch -P 1 -p1
%patch -P 2 -p1 -b .cve-2026-25646
%patch -P 12 -p1 -b .CVE-2026-33416_p1of4
%patch -P 13 -p1 -b .CVE-2026-33416_p2of4
%patch -P 14 -p1 -b .CVE-2026-33416_p3of5
%patch -P 15 -p1 -b .CVE-2026-33416_p4of5
%patch -P 16 -p1 -b .CVE-2026-33416_p5of5
%patch0 -p1
%patch1 -p1
# Provide pngusr.dfa for build.
cp -p %{SOURCE1} .
%build
%configure --disable-static
make %{?_smp_mflags} DFA_XTRA=pngusr.dfa
%make_build DFA_XTRA=pngusr.dfa
%install
make DESTDIR=$RPM_BUILD_ROOT install
%make_install
# We don't ship .la files.
rm -rf $RPM_BUILD_ROOT%{_libdir}/*.la
@ -76,12 +54,515 @@ rm -rf $RPM_BUILD_ROOT%{_bindir}/*
%{_libdir}/libpng15.so.*
%changelog
* Mon May 25 2026 Michal Hlavinka <mhlavink@redhat.com> - 1.5.30-9
- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161346)
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1.5.30-14
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
* Thu Mar 12 2026 Michal Hlavinka <mhlavink@redhat.com> - 1.5.30-8
- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148340)
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 1.5.30-13
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.30-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.30-11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Mon Jul 13 2020 Tom Stellard <tstellar@redhat.com> - 1.5.30-10
- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.30-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.30-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.30-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Wed Aug 01 2018 Nikola Forró <nforro@redhat.com> - 1.5.30-6
- Fix CVE-2018-13785 (#1599947)
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.30-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jun 28 2018 Nikola Forró <nforro@redhat.com> - 1.5.30-4
- Remove ldconfig from scriptlets
* Tue Feb 20 2018 Nikola Forró <nforro@redhat.com> - 1.5.30-3
- Add missing gcc build dependency
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.30-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Tue Oct 03 2017 Nikola Forró <nforro@redhat.com> - 1.5.30-1
- New upstream release 1.5.30 (#1497008)
* Fri Aug 25 2017 Nikola Forró <nforro@redhat.com> - 1.5.29-1
- New upstream release 1.5.29 (#1485083)
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.28-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.28-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Tue Jun 06 2017 Nikola Forró <nforro@redhat.com> - 1.5.28-3
- Update source URL (#1459082)
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.28-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Tue Jan 31 2017 Nikola Forró <nforro@redhat.com> - 1.5.28-1
- New upstream release 1.5.28 (#1409157)
* Mon May 30 2016 Petr Hracek <phracek@redhat.com> - 1.5.27-1
- New upstream release 1.5.27 (#1340301)
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.5.26-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Wed Jan 06 2016 Petr Hracek <phracek@redhat.com> - 1.5.26-1
- new upstream release 1.5.26 (#1292647)
* Mon Dec 07 2015 Petr Hracek <phracek@redhat.com> - 1.5.25-1
- new upstream release 1.5.25 (#1288265)
* Thu Nov 19 2015 Petr Hracek <phracek@redhat.com> - 1.5.24-1
- new upstream release 1.5.24 (#1281632)
* Wed Nov 18 2015 Petr Hracek <phracek@redhat.com> - 1.5.23-2
- Security fix CVE-2015-8126 (#1281756, #1282902)
* Mon Jul 27 2015 Petr Hracek <phracek@redhat.com> - 1.5.23-1
- New upstream release 1.5.23 (#1246066)
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.22-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Wed Apr 01 2015 Petr Hracek <phracek@redhat.com> - 1.5.22-1
- Update to libpng 1.5.22 for minor bug fixes (#1206405)
- PNG_SAFE_LIMITS macro is eliminated since 1.5.22 version
* Mon Jan 19 2015 Petr Hracek <phracek@redhat.com> - 1.5.21-1
- Update to libpng 1.5.21 for minor bug fixes (#1176908)
* Fri Nov 21 2014 Petr Hracek <phracek@redhat.com> - 1.5.20-1
- Update to libpng 1.5.20 for minor bug fixes (#1166359)
* Mon Sep 15 2014 Petr Hracek <phracek@redhat.com> - 1.5.19-1
- Update to libpng 1.5.19 for minor bug fixes (#1132842)
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.18-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.18-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu Apr 10 2014 Petr Hracek <phracek@redhat.com> - 1.5.18-1
- Update to libpng 1.5.18 for minor bug fixes
* Wed Jan 29 2014 Petr Hracek <phracek@redhat.com> - 1.5.17-2
- Adding patch CVE-2013-6954 (#1056856)
* Fri Jul 26 2013 Petr Hracek <phracek@redhat.com> - 1.5.17-1
- Update to libpng 1.5.17 for minor bug fixes
* Mon Jun 03 2013 Petr Hracek <phracek@redhat.com> - 1.5.16-1
- Update to libpng 1.5.16 for minor bug fixes
* Mon May 27 2013 Petr Hracek <phracek@redhat.com> - 1.5.13-3
- this is only renamed package
- Delivering only so libraries
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2:1.5.13-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Thu Sep 27 2012 Tom Lane <tgl@redhat.com> 2:1.5.13-1
- Update to libpng 1.5.13 for minor bug fixes
* Sat Aug 4 2012 Tom Lane <tgl@redhat.com> 2:1.5.12-1
- Update to libpng 1.5.12 for minor bug fixes
- Activate chunk size limits by default, with a very generous default limit
* Wed Aug 1 2012 Tom Lane <tgl@redhat.com> 2:1.5.10-3
- Remove compat subpackage (it's now a separate package "libpng12")
- Minor specfile cleanup per suggestions from Tom Callaway
Related: #845110
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2:1.5.10-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Sat Apr 7 2012 Tom Lane <tgl@redhat.com> 2:1.5.10-1
- Update to libpng 1.5.10 and 1.2.49, for minor security issues (CVE-2011-3048)
Resolves: #809597
* Sun Mar 11 2012 Tom Lane <tgl@redhat.com> 2:1.5.9-1
- Update to libpng 1.5.9 and 1.2.48, for minor security issues (CVE-2011-3045)
Resolves: #801667
* Thu Feb 16 2012 Tom Lane <tgl@redhat.com> 2:1.5.8-2
- Fix CVE-2011-3026
Resolves: #791183
* Fri Feb 3 2012 Tom Lane <tgl@redhat.com> 2:1.5.8-1
- Update to libpng 1.5.8, for minor security issue (CVE-2011-3464)
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2:1.5.7-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Sun Dec 18 2011 Tom Lane <tgl@redhat.com> 2:1.5.7-1
- Update to libpng 1.5.7, for assorted minor fixes
* Mon Nov 21 2011 Tom Lane <tgl@redhat.com> 2:1.5.6-2
- Don't include libpng12.pc in the compat subpackage; instead just offer a
phony Provides: for it in the devel subpackage
* Sat Nov 5 2011 Tom Lane <tgl@redhat.com> 2:1.5.6-1
- Update to new major release series 1.5.x; includes source-code-incompatible
API changes and a soname version bump
- Temporarily package 1.2.46 shared library (only) in libpng-compat subpackage
so that dependent packages won't be broken while rebuilding proceeds
* Thu Jul 14 2011 Tom Lane <tgl@redhat.com> 2:1.2.46-1
- Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690,
CVE-2011-2691, CVE-2011-2692
Resolves: #717509
Resolves: #721307
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2:1.2.44-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sat Jan 29 2011 Ville Skyttä <ville.skytta@iki.fi> - 2:1.2.44-2
- Use xz compressed source tarball
Resolves: #647282
* Tue Jun 29 2010 Tom Lane <tgl@redhat.com> 2:1.2.44-1
- Update to libpng 1.2.44, includes fixes for CVE-2010-1205 and CVE-2010-2249
Resolves: #609161
* Mon Mar 15 2010 Tom Lane <tgl@redhat.com> 2:1.2.43-1
- Update to libpng 1.2.43, includes fix for CVE-2010-0205
Related: #566234
* Wed Jan 20 2010 Tom Lane <tgl@redhat.com> 2:1.2.42-1
- Update to libpng 1.2.42
* Thu Aug 20 2009 Tom Lane <tgl@redhat.com> 2:1.2.39-1
- Update to libpng 1.2.39
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2:1.2.37-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Sat Jun 13 2009 Tom Lane <tgl@redhat.com> 2:1.2.37-1
- Update to libpng 1.2.37, to fix CVE-2009-2042
Related: #504782
* Wed Feb 25 2009 Tom Lane <tgl@redhat.com> 2:1.2.35-1
- Update to libpng 1.2.35, to fix CVE-2009-0040
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2:1.2.34-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Fri Jan 9 2009 Tom Lane <tgl@redhat.com> 2:1.2.34-1
- Update to libpng 1.2.34
* Thu Dec 11 2008 Caolán McNamara <caolanm@redhat.com> 2:1.2.33-2
- rebuild to get provides pkgconfig(libpng)
* Sun Nov 2 2008 Tom Lane <tgl@redhat.com> 2:1.2.33-1
- Update to libpng 1.2.33
* Tue Sep 9 2008 Tom Lane <tgl@redhat.com> 2:1.2.31-2
- Apply upstream patch for zTXT buffer overrun (CVE-2008-3964)
Related: #461599
* Sat Aug 23 2008 Tom Lane <tgl@redhat.com> 2:1.2.31-1
- Update to libpng 1.2.31
* Sat May 31 2008 Tom Lane <tgl@redhat.com> 2:1.2.29-1
- Update to libpng 1.2.29 (fixes low-priority security issue CVE-2008-1382)
Related: #441839
* Tue Feb 12 2008 Tom Lane <tgl@redhat.com> 2:1.2.24-1
- Update to libpng 1.2.24
* Thu Oct 18 2007 Tom Lane <tgl@redhat.com> 2:1.2.22-1
- Update to libpng 1.2.22, primarily to fix CVE-2007-5269
Related: #324771
* Wed Aug 22 2007 Tom Lane <tgl@redhat.com> 2:1.2.16-3
- Update License tag
- Rebuild to fix Fedora toolchain issues
* Wed May 23 2007 Tom Lane <tgl@redhat.com> 2:1.2.16-2
- Add patch to fix CVE-2007-2445
Related: #239542
* Mon Feb 12 2007 Tom Lane <tgl@redhat.com> 2:1.2.16-1
- Update to libpng 1.2.16
Resolves: #211705, #216706, #227334
- Separate libpng.a into a -static subpackage
- Other minor packaging fixes per Fedora merge review
Resolves: #226038
* Mon Oct 02 2006 Jesse Keating <jkeating@redhat.com> - 2:1.2.10-7
- Require pkgconfig in the -devel subpackage as it gets called by
/usr/bin/libpng-config
* Thu Jul 27 2006 Matthias Clasen <mclasen@redhat.com> - 2:1.2.10-6
- Disable asm on arches other than i386 (#196580)
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 2:1.2.10-5.1
- rebuild
* Thu May 25 2006 Matthias Clasen <mclasen@redhat.com> - 2:1.2.10-5
- Fix some paths in the -config script
* Tue May 23 2006 Matthias Clasen <mclasen@redhat.com> - 2:1.2.10-4
- fix multilib conflicts
* Mon May 22 2006 Matthias Clasen <mclasen@redhat.com> - 2:1.2.10-3
- Add a comment about the need to keep static libraries
* Mon May 22 2006 Matthias Clasen <mclasen@redhat.com> - 2:1.2.10-2
- Re-add static libraries
* Thu May 4 2006 Matthias Clasen <mclasen@redhat.com> - 2:1.2.10-1
- Update to 1.2.10
- Drop static libraries
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 2:1.2.8-2.2.1
- bump again for double-long bug on ppc(64)
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 2:1.2.8-2.2
- rebuilt for new gcc4.1 snapshot and glibc changes
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
- rebuilt
* Wed Mar 2 2005 Matthias Clasen <mclasen@redhat.com> - 2:1.2.8-2
- Rebuild with gcc4
* Mon Dec 06 2004 Matthias Clasen <mclasen@redhat.com> - 2:1.2.8-1
- Update to 1.2.8
* Wed Sep 15 2004 Matthias Clasen <mclasen@redhat.com> - 2:1.2.7-1
- Update to 1.2.7
* Tue Aug 17 2004 Matthias Clasen <mclasen@redhat.com> - 2:1.2.6-1
- Update to 1.2.6
- Combine patches
* Wed Aug 4 2004 Matthias Clasen <mclasen@redhat.com> 2:1.2.5-9
- Build for FC3
* Fri Jul 30 2004 Matthias Clasen <mclasen@redhat.com>
- Include LICENSE.
* Fri Jul 23 2004 Matthias Clasen <mclasen@redhat.com> 2:1.2.5-8
- Build for FC2
* Fri Jul 23 2004 Matthias Clasen <mclasen@redhat.com> 2:1.2.5-7
- Replace the patches for individual security problems with the
cumulative patch issued by the png developers.
- Build for FC1
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
* Mon Jun 14 2004 Matthias Clasen <mclasen@redhat.com> - 2:1.2.5-5
- Rebuild for FC2
* Mon Jun 14 2004 Matthias Clasen <mclasen@redhat.com> - 2:1.2.5-4
- Rebuild for FC1
* Mon Jun 14 2004 Matthias Clasen <mclasen@redhat.com> - 2:1.2.5-3
- Reinstate and improve the transfix patch which got lost sometime ago,
but is still needed for CAN-2002-1363 (#125934)
* Mon May 24 2004 Than Ngo <than@redhat.com> 2:1.2.5-2
- add patch to link libm automatically
- get rid of rpath
* Wed May 19 2004 Matthias Clasen <mclasen@redhat.com> 2:1.2.5-1
- 1.2.5
* Mon May 3 2004 Matthias Clasen <mclasen@redhat.com> 2:1.2.2-22
- Redo the out-of-bounds fix in a slightly better way.
* Wed Apr 21 2004 Matthias Clasen <mclasen@redhat.com>
- Bump release number to disambiguate n-v-rs.
* Mon Apr 19 2004 Matthias Clasen <mclasen@redhat.com>
- fix a possible out-of-bounds read in the error message
handler. #121229
* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
* Fri Feb 27 2004 Mark McLoughlin <markmc@redhat.com> 2:1.2.2-19
- rebuild with changed bits/setjmp.h on ppc
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
* Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
- rebuilt
* Tue Jun 3 2003 Jeff Johnson <jbj@redhat.com>
- add explicit epoch's where needed.
* Mon Feb 24 2003 Jonathan Blandford <jrb@redhat.com> 2:1.2.2-15
- change pkg-config to use libdir instead of hardcoding /usr/lib
* Mon Feb 24 2003 Elliot Lee <sopwith@redhat.com>
- rebuilt
* Thu Feb 20 2003 Jonathan Blandford <jrb@redhat.com> 2:1.2.2-12
- add Provides: libpng.so.3, #67007
* Fri Jan 24 2003 Jonathan Blandford <jrb@redhat.com>
- change requires to include the Epoch
* Thu Jan 23 2003 Karsten Hopp <karsten@redhat.de> 2:1.2.2-11
- Bump & rebuild
* Wed Jan 22 2003 Tim Powers <timp@redhat.com>
- rebuilt
* Wed Jan 15 2003 Elliot Lee <sopwith@redhat.com> 2:1.2.2-9
- Bump & rebuild
* Thu Dec 12 2002 Tim Powers <timp@redhat.com> 2:1.2.2-7
- merge changes in from -6hammer
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
- automated rebuild
* Thu May 23 2002 Tim Powers <timp@redhat.com>
- automated rebuild
* Tue May 7 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-4
- Don't own {_libdir}/pkgconfig
- Don't strip library, that's up to rpm
* Tue May 7 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-3
- Forgot png.h
* Mon May 6 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.2-2
- Fix compatibility with everyone else.
* Thu May 2 2002 Havoc Pennington <hp@redhat.com>
- 1.2.2 plus makefile patches tarball
- update file list to contain versioned libpng only
* Wed Jan 09 2002 Tim Powers <timp@redhat.com>
- automated rebuild
* Mon Dec 17 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.1-1
- 1.2.1
* Wed Sep 19 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.2.0-1
- 1.2.0
* Mon Jul 16 2001 Trond Eivind Glomsrd <teg@redhat.com>
- s/Copyright/License/
- fix weird versioning system (epoch was set to "2" in the main
package, serial to "1" in the devel package. Huh?)
* Wed Jun 20 2001 Than Ngo <than@redhat.com> 1.0.12-1
- update to 1.0.12
- add missing libpng symlink
* Thu May 3 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.0.11-2
- libpng-devel requires zlib-devel (since png.h includes zlib.h)
(#38883)
* Wed May 2 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.0.11-1
- 1.0.11
* Sun Apr 15 2001 Bernhard Rosenkraenzer <bero@redhat.com>
- 1.0.10
* Tue Feb 6 2001 Bernhard Rosenkraenzer <bero@redhat.com>
- 1.0.9, fixes Mozilla problems
* Tue Dec 12 2000 Bernhard Rosenkraenzer <bero@redhat.com>
- Rebuild to get rid of 0777 dirs
* Wed Nov 15 2000 Bernhard Rosenkraenzer <bero@redhat.com>
- Remove the workaround for Bug #20018 (from Oct 30).
Qt 2.2.2 fixes the problem the workaround addressed.
* Mon Oct 30 2000 Bernhard Rosenkraenzer <bero@redhat.com>
- Work around a problem causing konqueror to segfault in image preview
mode (Bug #20018)
- Copy SuSE 7.0's patch to handle bad chunks
* Sun Sep 3 2000 Florian La Roche <Florian.LaRoche@redhat.de>
- only include the man5 man-pages once in the main rpm
* Fri Jul 28 2000 Preston Brown <pbrown@redhat.com>
- upgrade to 1.0.8 - fixes small memory leak, other bugs
* Thu Jul 13 2000 Prospector <bugzilla@redhat.com>
- automatic rebuild
* Mon Jun 19 2000 Bernhard Rosenkraenzer <bero@redhat.com>
- patchlevel c
- FHSify
* Tue Mar 21 2000 Nalin Dahyabhai <nalin@redhat.com>
- update to 1.0.6
* Mon Mar 13 2000 Nalin Dahyabhai <nalin@redhat.com>
- change serial to Epoch to get dependencies working correctly
* Fri Feb 11 2000 Nalin Dahyabhai <nalin@redhat.com>
- move buildroot and add URL
* Sat Feb 5 2000 Bernhard Rosenkraenzer <bero@redhat.com>
- strip library
- rebuild to compress man pages
* Sun Nov 21 1999 Bernhard Rosenkraenzer <bero@redhat.com>
- 1.0.5
- some tweaks to spec file to make updating easier
- handle RPM_OPT_FLAGS
* Mon Sep 20 1999 Matt Wilson <msw@redhat.com>
- changed requires in libpng-devel to include serial
- corrected typo
* Sun Mar 21 1999 Cristian Gafton <gafton@redhat.com>
- auto rebuild in the new build environment (release 2)
* Sun Feb 07 1999 Michael Johnson <johnsonm@redhat.com>
- rev to 1.0.3
* Thu Dec 17 1998 Cristian Gafton <gafton@redhat.com>
- build for 6.0
* Wed Sep 23 1998 Cristian Gafton <gafton@redhat.com>
- we are Serial: 1 now because we are reverting the 1.0.2 version from 5.2
beta to this prior one
- install man pages; set defattr defaults
* Thu May 07 1998 Prospector System <bugs@redhat.com>
- translations modified for de, fr, tr
* Thu Apr 30 1998 Cristian Gafton <gafton@redhat.com>
- devel subpackage moved to Development/Libraries
* Wed Apr 08 1998 Cristian Gafton <gafton@redhat.com>
- upgraded to 1.0.1
- added buildroot
* Tue Oct 14 1997 Donnie Barnes <djb@redhat.com>
- updated to new version
- spec file cleanups
* Thu Jul 10 1997 Erik Troan <ewt@redhat.com>
- built against glibc
* Thu Jun 06 2019 Nikola Forró <nforro@redhat.com> - 1.5.30-7
- New package for RHEL 8.1.0
resolves: #1687581