Changelog for
gdk-pixbuf-lang-2.42.10-3.2.noarch.rpm :
* Wed Oct 26 2022 Bjørn Lie
- Update to version 2.42.10: + Search for rst2man.py. + Update the memory size limit for JPEG images. + Updated translations.- Drop patch fixed upstream (with different limit): + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch
* Tue Aug 30 2022 Michael Gorse - Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch: fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).
* Mon Aug 15 2022 Dirk Müller - avoid bashism in baselibs postscript (bsc#1195391)
* Tue Aug 09 2022 Bjørn Lie - Update to version 2.42.9: + Fix the check for maximum value of LZW initial code size (boo#1194633 CVE-2021-44648). + Use CMake for dependencies on Windows/MSVC. + Add option for building tests. + Move man pages to reStructuredText. + Disable relocation when built as a static libary on Windows. + Update wrap file for libjpeg-turbo. + Limit the memory size when loading image data.- Add docutils and pkgconfig(gi-docgen) BuildRequires: New dependencies.
* Fri Mar 18 2022 Bjørn Lie - Update to version 2.42.8 (boo#1201826): + Clear the pixbuf\'s memory buffer to avoid returning uninitialized memory. + Turn GdkPixbufModule functions into typed callbacks. + tiff: Use non-deprecated C99 integer types. + gif: Check for overflow when compositing or clearing frames. + Change png/jpeg/tiff build options from boolean to feature. + jpeg: Do not rely on UB around setjmp/longjmp. + Build fixes. + Documentation fixes. + Security fixes: CVE-2021-46829. + Updated translations.- Stop passing options to meson that just follow upstream default, just rely on upstream providing sane defaults, apart from where we want to deviate.
* Thu Nov 04 2021 Bjørn Lie - Stop passing no longer used nor recognized options jasper=false and x11=false to meson, fails the build when using meson 0.60.x.
* Thu Sep 16 2021 Stanislav Brabec - Remove obsolete translation-update-upstream support (jsc#SLE-21105).
* Fri Jul 30 2021 Yifan Jiang - Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap 15.4: fixed upstream.
* Wed Apr 14 2021 Ferdinand Thiessen - Update to stable 2.42.6 + Yield gtk_doc option value in subprojects + Always initialise locale on thumbnailer startup + Add fallback subproject for libjpeg + Use type:array for the builtin_loaders option + Default to using builtin png and jpeg loaders
* Sat Mar 27 2021 Dominique Leuenberger - Disable building of docs: creates a cycle with python: + Drop python3-gi-docgen BuildRequires. + Pass gtk_doc=false to meson
* Sun Mar 21 2021 Dominique Leuenberger - Update to version 2.42.4: + Make enum type registration thread safe. + Do not install skipped test files. + Fix GIF initialization. + Always run GIF loader tests. + Fix leaks discovered via ASan. + Expose GdkPixbufLoader API via introspection. + Fix revert-to-previous first frame behaviour for GIF files. + Link to libintl if needed. + Improve support for using gdk-pixbuf as a subproject. + Fix build with GModule disabled. + Use gi-docgen to generate the API reference from introspection data.- Replace gtk-doc BuildRequires with python3-gi-docgen: follow upstreams port.- As a workaround to https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete the installed gi-docgen program files.
* Thu Jan 07 2021 Jia Zhaocong - Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch: gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)
* Tue Dec 08 2020 dimstarAATTopensuse.org- Update to version 2.42.2: + Requre Meson 0.55.3. + Improve the PNG save operation. + Fix leak in the error path of the XPM loader. + Fix loading GIF without a GCE rendering color 0. + Fix invalid LZW codes in the GIF loader (CVE-2020-29385).
* Mon Nov 09 2020 Dominique Leuenberger - Udpate to version 2.42.0: + Remove the libjasper JPEG2000 loader. + Split the gdk-pixbuf-xlib library to a separate repository. + Fix cppcheck \'shifting signed 32-bit value warning\', + Fix memory leaks in pixops error paths, + Improve internal consistency of loaders, + Skip bytes during JPEG incremental load. + Check for overflows. + Let the test suite cope with missing loaders. + Check for mmap failure. + Fix UB in the XPM loader. + Speed up alpha scaling pixop. + Add the `gtk_doc` configuration option, and deprecate `docs`. + Add the `introspection` configuration option, and remove `gir`. + Handle truncated PNMs more gracefully. + Clean up GIF loader code. + Fix colormap handling in GIF.- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.- Replace meson parameters, following upstream changes: + -Ddocs=true => -Dgtk_doc=true. + -Dgir=true => -Dintrospection=enabled.
* Mon Jul 27 2020 Jia Zhaocong - Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows by checking the memset length argument (boo#1174307).- Raise dependency glib-2.0 version.
* Mon Feb 24 2020 Yifan Jiang - A file tests/test-images/gif-test-suite/max-width.gif from the test suite is correctly identified by clamav to be a malicious BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part of the test suite to ensure it has no negative side effects. On SLE, the package is built with clamav scanning, which then prevents a successful build. This change repacks the source package to a password-protected zip to bypass the clamav scanning for SLE (bsc#1159337), with following update: + Download upstream tarball through source service + Add pre_checkin.sh to convert tarball to zip file + Update spec-file to use the zip file as main source
* Thu Jan 30 2020 Dominique Leuenberger - No longer recommend -lang: supplements are in use