Changelog for libpng16-16-1.6.39-4.1.x86_64.rpm :

* Fri Nov 25 2022 Dominique Leuenberger - Update to version 1.6.39:
* cmake: Default to PNG_ARM_NEON=off for arm targets. + Turn large PNG chunks into benign errors. + Update, rename and clean up various scripts. + tools: Fix a buffer overflow involving a file name in pngfix. + tools: Fix a memory leak in pngcp.
* Fri Sep 16 2022 Dirk Müller - update to 1.6.38:
* Added configurations and scripts for continuous integration.
* Fixed various errors in the handling of tRNS, hIST and eXIf.
* Implemented many stability improvements across all platforms.
* Updated the internal documentation.
* Wed May 04 2022 Marcus Meissner - switch source url to https
* Thu May 06 2021 pgajdosAATTsuse.com- install rpm macros in %{_rpmmacrodir} [bsc#1185661]- call spec-cleaner
* Thu Mar 11 2021 Lubos Lunak - enable hardware optimizations (such as SSE)
* Wed Apr 17 2019 pgajdosAATTsuse.com- make check actually works under asan
* Mon Apr 15 2019 pgajdosAATTsuse.com- version update to 1.6.37 Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free. Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette. Fixed a memory leak in pngtest.c. Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in contrib/pngminus; refactor. Changed the license of contrib/pngminus to MIT; refresh makefile and docs. (Contributed by Willem van Schaik) Added makefiles for AddressSanitizer-enabled builds.- deleted patches - libpng-arm-free.patch (upstreamed)
* Mon Jan 28 2019 Petr Gajdos - fix arm build [bsc#1121829] + libpng-arm-free.patch
* Mon Jan 14 2019 Petr Gajdos - asan_build: build ASAN included- debug_build: build more suitable for debugging, install pngcp
* Mon Dec 31 2018 Petr Gajdos - update to 1.6.36: Replaced the remaining uses of png_size_t with size_t (Cosmin) Fixed the calculation of row_factor in png_check_chunk_length (reported by Thuan Pham in SourceForge issue #278) Added missing parentheses to a macro definition (suggested by \"irwir\" in GitHub issue #216) Optimized png_do_expand_palette for ARM processors. Improved performance by around 10-22% on a recent ARM Chromebook. (Contributed by Richard Townsend, ARM Holdings) Fixed manipulation of machine-specific optimization options. (Contributed by Vicki Pfau) Used memcpy instead of manual pointer arithmetic on Intel SSE2. (Contributed by Samuel Williams) Fixed build errors with MSVC on ARM64. (Contributed by Zhijie Liang) Fixed detection of libm in CMakeLists. (Contributed by Cameron Cawley) Fixed incorrect creation of pkg-config file in CMakeLists. (Contributed by Kyle Bentley) Fixed the CMake build on Windows MSYS by avoiding symlinks. Fixed a build warning on OpenBSD. (Contributed by Theo Buehler) Fixed various typos in comments. (Contributed by \"luz.paz\") Raised the minimum required CMake version from 3.0.2 to 3.1. Removed yet more of the vestigial support for pre-ANSI C compilers. Removed ancient makefiles for ancient systems that have been broken across all previous libpng-1.6.x versions. Removed the Y2K compliance statement and the export control information. Applied various code style and documentation fixes.- removed patches
* libpng16-CVE-2018-13785.patch (upstreamed)- cannot find upstream tarball signature, asked upstream for clarification