Changelog for libnetpbm-devel-11.7.0-1.1.x86_64.rpm :

* Fri Jul 12 2024 pgajdosAATTsuse.com- fix CVE-2024-38526 [bsc#1227693] Polyfill Supplay Chain Attack
* Fri Jul 12 2024 pgajdosAATTsuse.com- version update to 11.7.0
* Release 11.07.00 + libnetpbm: Fix double free crash when memory allocation via REALLOCARRAY fails. Introduced in Netpbm 10.40 (September 2007). + libnetpbm: Allow color dictionary with more than 1000 entries. + ppmhist, ppmtoxpm: Work with color dictionary with more than 1000 color entries. + rgb.txt: Add Resene paint colors, 2010.
* Release 11.06.00 + pamcut: add -reportonly. + infotopam: Add input validation. + infotopam: Remove input file name from messages. Add -verbose and issue informational message only if it is specified. + libnetpbm: Don\'t ignore garbage at the end of a color specifier (e.g. rgbi:0/.5/1xyz). + color database: change names of \"Spring Green\", \"Lamp Black\", and \"light grey\" to \"SpringGreen\", \"LampBlack\", and \"LightGrey\" to be consistent with other color names. + pamcut: fix incorrect output when rectangle to cut is entirely above the input image. Invisible junk after image. Always broken. (The ability to cut outside the input image was new in pamcut\'s predecessor pnmcut in Netpbm 9.7 (August 2000). + pamcut: fix incorrect output with PBM input when rectangle to cut is entirely below the input image. Invisible junk after image. Broken in Netpbm 10.44 (September 2008). + ppmtowinicon: fix array overrun with 4 and 8 bits per pixel. Broken in Netpbm 11.05 (December 2023). + infotopam: fix incorrect output -- columns always in wrong place. Always broken. (infotopam was new in Netpbm 10.22 (May 2004)). + pamseq: fix typo in error message. + build: makeman: fix warning about backslashes in strings.- modified patches % netpbm-gcc-warnings.patch (refreshed) % netpbm-security-code.patch (refreshed)
* Fri Feb 02 2024 pgajdosAATTsuse.com- added patches fix CVE-2017-5849 [bsc#1022790], CVE-2017-5849 [bsc#1022791] + netpbm-use-byrow-when-needed.patch
* Wed Jan 31 2024 pgajdosAATTsuse.com- version update to 11.5.2 Release 11.05.02 + ppmtowinicon: fix array overrun with 4 and 8 bits per pixel. Release 11.05.01 Fix typo in ppmforge test case. Release 11.05.00 + pnmpad: Add -color, -promote, -extend-edge, -detect-background . + pnmconvol: Restore ability of convolution matrix to be a pseudo-plain-PNM with samples that exceed the maxval. Lost in 10.30 (October 2005) because maxval-checking code was added to libnetpbm. (Was fixed in 10.47.08 in November 2010, but only in the 10.47 series). + pnmindex: Improve failure mode when -size or -across is zero. + pnmindex: Make -plain work. + pnmpad: fix behavior with -left, -right, and -width together or - top, -bottom, -height together: ignores -width where it should fail. Broken in Netpbm 10.72 (September 2015). + pamtosvg: fix \"zero determinant\" failure. Introduced in Netpbm 11.04 (September 2023). + pjtoppm: fix crash based on uninitialized variable. Introduced in Netpbm 11.04 (September 2023). + ppmtopcxl: fix incorrect output with > 256 colors. Always broken. (Program was added in primordial Netpbm in 1990). + pbmtext: fix buffer overrun with insanely large input. + picttoppm: fix buffer overrun with insanely wide input. + ppmtoxpm: fix incorrect output with insanely large number of colors. + pnmscalefixed: fix incorrect output with really big image and - pixels option. + ppmdither: fix buffer overrun with insanely large dithering matrix. + pnmpad: no longer accept old-style options (e.g. -t50). + libnetpbm: Add pm_feed_from_file, pm_accept_to_files, pm_accept_to_filestream Standard Input feeder, Output accepter for pm_system. + libnetpbm, programs that use color maps: fix buffer overrun with insanely deep images. + merge build: Fix \'pnmcat\'. Introduced in Netpbm 11.00 (September 2023). Release 11.04.00 + pamaddnoise: add -salt. + pamaddnoise: reject options that aren\'t meaningful for the type of noise specified rather than just ignore them. + ppmtosixel: Add -7bit, so it works on more terminals, including xterms. Thanks Scott Pakin. + g3topbm: Add -correctlong + pnmtojpeg: minor improvement to error messages about bad files. + pammixmulti: Remove disclaimer of patent license. + pamstack: Fix bug: acts like -firstmaxval specified when it wasn\'t. Introduced in Netpbm 11.03 (June 2023). + pamstack: Fix -lcmmaxval: chooses wrong maxval. Always broken (-lcmmaxval was new in Netpbm 11.03 (June 2023)). + pamstack: Fail gracefully when total number of planes is too large for unsigned integer. Always broken (Pamstack was new in Netpbm 10.0 (June 2002). + pamtosvg: fix hang. + ppmfade: fix \"file not found\" crash for most fade modes. Introduced in Netpbm 10.98 (March 2022). + ppmfade: fix incorrect block mode fade. Always broken (ppmfade was new in Netpbm 8.4 (April 2000)). + pamaddnoise: fix very incorrect noise added for all types. Introduced in Netpbm 10.94 (March 2021). + ppmrough: fix buffer overrun. Always broken (Ppmrough was new in Netpbm 10.9 (September 2002). ppmrough: fix excessive roughness. Introduced in Netpbm 10.94 (March 2021). + pgmtexture: Fix buffer overflow with maxval > 255. Always broken. Maxvals > 255 were possible starting in Netpbm 9.0 (April 2000). + pgmtexture: Fix bug: ignores -d. Introduced in Netpbm 10.56 (September 2011). + xwdtopnm Fix spurious output with really wide/deep rows. + imgtoppm: Fix spurious output with really wide/deep rows. + pbmtopgm: Fix error message for excessive -width. + pbmtoxbm: Fix spurious output with really wide rows. + tifftopnm: Fix incorrect output with insanely wide/deep rows. + thinkjettopbm: Fix incorrect output with insanely wide rows. + ybmtopbm: Fix incorrect output with insanely wide rows. + pjtoppm: Fix incorrect output with insanely large number of rows. + library: add check of maxval for computable size. + Build: Include LDFLAGS in link of shared library.
* Release 11.03.00 + pamstack: Add -firstmaxval, -lcmmaxval + pnmcolormap: make result independent of how system\'s qsort orders records with equal keys. Affects pnmquant. + pamtopng: fix typo in error message about -chroma option. + pamtopng, pnmtopng, pngtopam: fix error message when something fails in libpng. Always broken (the programs were new in Netpbm 8.1 (March 2000)).- modified patches % netpbm-gcc-warnings.patch (refreshed) % netpbm-security-code.patch (refreshed)
* Fri Jun 23 2023 pgajdosAATTsuse.com- version update to 11.2.0
* jpegtopnm: Add -traceexif
* pbmtextps: Add -asciihex, -ascii85.
* pcdovtoppm: remove dependency on obsolete \'tempfile\' program.
* jpegtopnm: Many fixes to -dumpexif. Always broken. (-dumpexif was new in Netpbm 9.18 (September 2001))
* pamtopng: fix -chroma option: always rejected. Always broken. (pamtopng was new in Netpbm 10.70 (June 2015)).
* pnmtopng: fix -rgb option: always rejected. Always broken (-rgb was new in Netpbm 10.30 (October 2005)).
* build: change the way you add the separately distributed \'hpcdtoppm\' code to the build.
* lot of changes since last version update, see https://sourceforge.net/p/netpbm/code/HEAD/tree/advanced/doc/HISTORY- modified patches % netpbm-gcc-warnings.patch (refreshed) % netpbm-security-code.patch (refreshed) % netpbm-security-scripts.patch (refreshed)- deleted patches - netpbm-tmpfile.patch (upstreamed) - ppmforge-fix-overflow.patch (upstreamed) - signed-char.patch (upstreamed)
* Thu Jan 19 2023 Otto Hollmann - Drop patch big-endian.patch, already in upstream since 10.87.00
* Sun Sep 18 2022 Andreas Schwab - ppmforge-fix-overflow.patch: Fix arithmetic overflow in ppmforge- ppmforge-test.patch: removed
* Wed Sep 14 2022 Andreas Schwab - ppmforge-test.patch: fix ppmforge test to avoid float overflow
* Sun Dec 19 2021 Andreas Schwab - signed-char.patch: fix bad use of plain char
* Mon Dec 13 2021 pgajdosAATTsuse.com- version update to 10.96.4 palmtopnm: Fix bug: fails with PackBits input on platform with default unsigned char, such as ppc64. Always broken. (Ability to convert PackBits input was new in Netpbm 10.27 (March 2005). sunicontopnm, escp2topbm, mgrtopbm, ybmtopbm, pamcut, pbmpscale, pnmcat, pnmpad: Fix arithmetic overrun with ridiculously large image. pamrubber: Fix bug: random behavior with -quad when you specify both points for source or target and the second one is lower in the image than the first. Always broken (Pamrubber was new in Netpbm 10.54 (March 2011)). libnetpbm: When validating computable size of width and height, allow for adding up to 10 instead of 2, to account for rounding up to a multiple of 8 in processing bit maps. pamtogif: Fix bug: doesn\'t ignore the input alpha mask when user specified -transparent. Broken in Netpbm 10.37 (December 2006). pgmtoppm: Eliminate dependency on color dictionary when user does not specify any colors by name. pamstereogram: Fix crash with -xbegin=0. Thanks Scott Pakin. Introduced in Netpbm 10.94. pamtopng: Fix rejection of all BLACKANDWHITE_ALPHA images with message about wrong depth. Always broken (pamtopng was new in Netpbm 10.71 (June 2015)). Thanks Karol Kosek . pamtopng: Fix failure with GRAYSCALE_ALPHA images with maxval less than 255. Always broken (pamtopng was new in Netpbm 10.71 (June 2015)). Thanks Karol Kosek . pamtopng: Fix: treats all tuple types that start with BLA as BLACKANDWHITE. Always broken (pamtopng was new in Netpbm 10.71 (June 2015)). pamtopng: Fix -transparent option - program recognized - transparency instead. Always broken (pamtopng was new in Netpbm 10.71 (June 2015)). pamtogif: Fix failure with bogus message about wrong depth with grayscale and black and white PAM images with transparency. Always broken (pamtogif was new in Netpbm 10.37 (December 2006)). Thanks Karol Kosek . ppmtogif: Same as \'pamtogif\' fix above, but with -alpha option. Build: Fix build failure due to missing \'random\' function on Mingw platform. Bug introduced in Netpbm 10.94 (March 2021). Build: Don\'t attempt to build \'pamexec\' on systems without Unix process management. Bug introduced in Netpbm 10.94 (March 2021). Build: Make it work on systems that don\'t have date +%s. Broken in Netpbm 10.78 (March 2017). Thanks Claes Nästén (pekdonAATTgmail.com). Build: Fix for MacOS build failures with missing sprintf and vasprintf in broken build environment. Mkdeb: fix failure with message about unrecognized format of VERSION file. Introduced in Netpbm 10.90 (March 2020). Add pamhomography: Thanks Scott Pakin. pamstereogram: Add -yfillshift . pamtowinicon: Add BMP/PNG encoding to verbose output. Use internal random number generator everywhere random numbers are used except ppmtoilbm, so seeded results are the same on all platforms. pamexec: Issue message instead of being killed by a signal when the exec\'ed program does not read the whole image\" ppmforge: Fail if -dimension is greater than 5, which is useless. pamscale: Fix bogus \"bad magic number\" or similar failure most of the time with -nomix. Broken since Netpbm 10.49 (December 2009). pnmtopng: Fix incorrect transparency in output when requesting transparency. Introduced after Netpbm 10.35 (August 2006) but not after Netpbm 10.47 (June 2009). pnmtopng: Fix buffer overrun or bogus \"too many color/ transparency pairs\" failure when requesting transparency. Introduced after Netpbm 10.26 (January 2005) but not after Netpbm 10.35 (August 2006). pamtojpeg2k: Fix constant failure with message about file close failing. libnetpbm: pm_system: Fix bug: standard input feeder process repositions unrelated files. Always broken (pm_system was new in Netpbm 10.13 (September 2003). Pamtowinicon: Fix crash or incorrect output with PNG encoding (result of pm_system bug above). Always broken (Pamtowinicon was new in Netpbm 10.63 (June 2013). pnmtopng: Fix trivial memory leaks. pnmtops: Fix incorrect output (arithmetic overflow) when bounding box is exactly INT_MAX high or wide. Always broken. Pnmtops was in primordial Netpbm.- modified patches % netpbm-gcc-warnings.patch (refreshed) % netpbm-security-code.patch (refreshed)- deleted patches - signed-char.patch (upstreamed)