|
|
|
|
Changelog for gdk-pixbuf-lang-2.42.9-2.2.noarch.rpm :
* Tue Aug 30 2022 Michael Gorse - Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch: fix loading of larger images (glgo#GNOME/gdk-pixbuf#216). * Mon Aug 15 2022 Dirk Müller - avoid bashism in baselibs postscript (bsc#1195391) * Tue Aug 09 2022 Bjørn Lie - Update to version 2.42.9: + Fix the check for maximum value of LZW initial code size (boo#1194633 CVE-2021-44648). + Use CMake for dependencies on Windows/MSVC. + Add option for building tests. + Move man pages to reStructuredText. + Disable relocation when built as a static libary on Windows. + Update wrap file for libjpeg-turbo. + Limit the memory size when loading image data.- Add docutils and pkgconfig(gi-docgen) BuildRequires: New dependencies. * Fri Mar 18 2022 Bjørn Lie - Update to version 2.42.8 (boo#1201826): + Clear the pixbuf\'s memory buffer to avoid returning uninitialized memory. + Turn GdkPixbufModule functions into typed callbacks. + tiff: Use non-deprecated C99 integer types. + gif: Check for overflow when compositing or clearing frames. + Change png/jpeg/tiff build options from boolean to feature. + jpeg: Do not rely on UB around setjmp/longjmp. + Build fixes. + Documentation fixes. + Security fixes: CVE-2021-46829. + Updated translations.- Stop passing options to meson that just follow upstream default, just rely on upstream providing sane defaults, apart from where we want to deviate. * Thu Nov 04 2021 Bjørn Lie - Stop passing no longer used nor recognized options jasper=false and x11=false to meson, fails the build when using meson 0.60.x. * Thu Sep 16 2021 Stanislav Brabec - Remove obsolete translation-update-upstream support (jsc#SLE-21105). * Fri Jul 30 2021 Yifan Jiang - Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap 15.4: fixed upstream. * Wed Apr 14 2021 Ferdinand Thiessen - Update to stable 2.42.6 + Yield gtk_doc option value in subprojects + Always initialise locale on thumbnailer startup + Add fallback subproject for libjpeg + Use type:array for the builtin_loaders option + Default to using builtin png and jpeg loaders * Sat Mar 27 2021 Dominique Leuenberger - Disable building of docs: creates a cycle with python: + Drop python3-gi-docgen BuildRequires. + Pass gtk_doc=false to meson * Sun Mar 21 2021 Dominique Leuenberger - Update to version 2.42.4: + Make enum type registration thread safe. + Do not install skipped test files. + Fix GIF initialization. + Always run GIF loader tests. + Fix leaks discovered via ASan. + Expose GdkPixbufLoader API via introspection. + Fix revert-to-previous first frame behaviour for GIF files. + Link to libintl if needed. + Improve support for using gdk-pixbuf as a subproject. + Fix build with GModule disabled. + Use gi-docgen to generate the API reference from introspection data.- Replace gtk-doc BuildRequires with python3-gi-docgen: follow upstreams port.- As a workaround to https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete the installed gi-docgen program files. * Thu Jan 07 2021 Jia Zhaocong - Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch: gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393) * Tue Dec 08 2020 dimstarAATTopensuse.org- Update to version 2.42.2: + Requre Meson 0.55.3. + Improve the PNG save operation. + Fix leak in the error path of the XPM loader. + Fix loading GIF without a GCE rendering color 0. + Fix invalid LZW codes in the GIF loader (CVE-2020-29385). * Mon Nov 09 2020 Dominique Leuenberger - Udpate to version 2.42.0: + Remove the libjasper JPEG2000 loader. + Split the gdk-pixbuf-xlib library to a separate repository. + Fix cppcheck \'shifting signed 32-bit value warning\', + Fix memory leaks in pixops error paths, + Improve internal consistency of loaders, + Skip bytes during JPEG incremental load. + Check for overflows. + Let the test suite cope with missing loaders. + Check for mmap failure. + Fix UB in the XPM loader. + Speed up alpha scaling pixop. + Add the `gtk_doc` configuration option, and deprecate `docs`. + Add the `introspection` configuration option, and remove `gir`. + Handle truncated PNMs more gracefully. + Clean up GIF loader code. + Fix colormap handling in GIF.- Drop gdk-pixbuf-boo1174307-io-gif-overflow.patch: fixed upstream.- Replace meson parameters, following upstream changes: + -Ddocs=true => -Dgtk_doc=true. + -Dgir=true => -Dintrospection=enabled. * Mon Jul 27 2020 Jia Zhaocong - Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows by checking the memset length argument (boo#1174307).- Raise dependency glib-2.0 version. * Mon Feb 24 2020 Yifan Jiang - A file tests/test-images/gif-test-suite/max-width.gif from the test suite is correctly identified by clamav to be a malicious BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part of the test suite to ensure it has no negative side effects. On SLE, the package is built with clamav scanning, which then prevents a successful build. This change repacks the source package to a password-protected zip to bypass the clamav scanning for SLE (bsc#1159337), with following update: + Download upstream tarball through source service + Add pre_checkin.sh to convert tarball to zip file + Update spec-file to use the zip file as main source * Thu Jan 30 2020 Dominique Leuenberger - No longer recommend -lang: supplements are in use * Wed Nov 27 2019 Bjørn Lie - Drop pkgconfig(x11) BuildRequires and pass -Dx11=false to meson. No longer build x11 support, that is now split out in it\'s own compat package. * Tue Oct 08 2019 Bjørn Lie - Update to version 2.40.0: + Allow creating a GdkPixbuf instance without any property. * Mon Sep 09 2019 mgorseAATTsuse.com- Update to version 2.39.2: + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf loader modules in a separate directory. + Add subproject fallback for dependencies. + Handle large XPM without crashing. + Use the appropriate gdk-pixbuf-query-loaders on install. + Disable deprecation warnings introduced by GLib 2.62. + Escape GIF version in error messages. + Render GIF frames on demand. * Mon Sep 09 2019 Bjørn Lie - Update to version 2.38.2: + build: Remove unnecessary argument. + gif: Suppress last deprecation warning. + tests: - Disable deprecation warnings for GTimeVal. - Add test for issue 95. - Add test image for invalid XPM data. + Disable deprecation warnings for GTimeVal. + Use the monotonic clock instead of wall one. + xpm: - Fail when XPM file doesn\'t contain enough data. - Simplify error path. - Sanity check XPM file dimensions. * Wed May 08 2019 Dominique Leuenberger - Move RPM macros to %_rpmmacrodir. * Thu Feb 28 2019 Bjørn Lie - Update to version 2.38.1: + Fix OOM in JPEG2000 loader. + Fix thumbnailing of animated GIFs. + Multiple improvements to the GIF loader. + Fix introspection generation. + Fix error handling in PNG loader. + Improve reproducibility of the build. + Speed up saving PNG files. + Add variables in the pkg-config files for binary utilities. + Build fixes. * Sun Sep 09 2018 antoine.belvireAATTopensuse.org- Update to version 2.38.0: + Stable release. + Documentation fixes. * Wed Aug 22 2018 bjorn.lieAATTgmail.com- Update to version 2.37.92: + Ensure that GdkPixbuf\'s storage is safely handled. + Add test case for buffer overflow in pixdata loader. * Sun Jul 08 2018 bjorn.lieAATTgmail.com- Pass all options to meson, ensure we build gdk-pixbuf with the features we want. * Wed Jun 20 2018 luc14n0AATTlinuxmail.org- Update to version 2.37.0: + Plug a memory leak when using GBytes (bgo#787626). + Fix introspection annotations (bgo#789935). + Fix OOB error when dithering (bgo#748211). + Drop the MMX assembly optimizations for pixops. + Improve compatibility for the post-install script (bgo#795705). + Expose the dimensions of the original image from GdkPixbufLoader (bgo#778517). + Improve thumbnailer implementation (bgo#778517). + Generate separate introspection data for GdkPixdata API (glgo#GNOME/gdk-pixbuf#72). + Deprecate GDK_INTERP_HYPER (glgo#GNOME/gdk-pixbuf#3).- Pass installed_tests as false to meson to make sure we don\'t ship unnecessary tests.- Add typelib-1_0-GdkPixdata GI subpackage and require it on the devel package, following upstream changes. * Tue Apr 10 2018 luc14n0AATTlinuxmail.org- Update to version 2.36.12: + gif, ico, jpeg, tiff, icns: various fixes (bgo#778584, bgo#779012, bgo#753605, bgo#779020, bgo#779016). + Implement async loading without threads. + Updated translations.- Rename with_docs meson option to docs, following usptream change.- Drop fixed upstream patches: gdk-pixbuf-bgo779012-ico-overflow.patch, gdk-pixbuf-gif-negative-array-indexes.patch, gdk-pixbuf-gif-uninitialized-variable.patch, gdk-pixbuf-tiff-overflow.patch and gdk-pixbuf-icns-handle-short-blocklen.patch. * Tue Mar 20 2018 dimstarAATTopensuse.org- Unconditionally enable translation-update-upstream: on Tumbleweed, this results in a NOP and for Leap in SLE paid translations being used (boo#1086036). * Wed Feb 28 2018 dimstarAATTopensuse.org- Modernize spec-file by calling spec-cleaner * Fri Jan 05 2018 mgorseAATTsuse.com- Add gdk-pixbuf-bgo779012-ico-overflow.patch: fix a potential integer overflow (boo#1027026 CVE-2017-6312).- Add gdk-pixbuf-gif-negative-array-indexes.patch and gdk-pixbuf-gif-uninitialized-variable.patch: protect against access to negative array indexes (BGO#778584).- Add gdk-pixbuf-tiff-overflow.patch: avoid overflow during size computation (bgo#779020).- Add gdk-pixbuf-icns-handle-short-blocklen.patch: protect against short block length when reading icns (boo#1027024 CVE-2017-6313).
|
|
|