- version update to 1.6.44:
  * Hardened calculations in chroma handling to prevent overflows, and
    relaxed a constraint in cHRM validation to accomodate the standard
    ACES AP1 set of color primaries.
    (Contributed by John Bowler)
  * Removed the ASM implementation of ARM Neon optimizations and updated
    the build accordingly. Only the remaining C implementation shall be
    used from now on, thus ensuring the support of the PAC/BTI security
    features on ARM64.
    (Contributed by Ross Burton and John Bowler)
  * Fixed the pickup of the PNG_HARDWARE_OPTIMIZATIONS option in the
    CMake build on FreeBSD/amd64. This is an important performance fix
    on this platform.
  * Applied various fixes and improvements to the CMake build.
    (Contributed by Eric Riff, Benjamin Buch and Erik Scholz)
  * Added fuzzing targets for the simplified read API.
    (Contributed by Mikhail Khachayants)
  * Fixed a build error involving pngtest.c under a custom config.
    This was a regression introduced in a code cleanup in libpng-1.6.43.
    (Contributed by Ben Wagner)
  * Fixed and improved the config files for AppVeyor CI and Travis CI.
- Drop upstream patch:
  * 563.patch (forwarded request 1219518 from Guillaume_G)

• Files Changed
• Browse Source

- Fix missing backslash (forwarded request 1193249 from Andreas_Schwab)

• Files Changed
• Browse Source

- Backport patch to fix PAC/BTI support on aarch64:
  * 563.patch (forwarded request 1180119 from Guillaume_G)

• Files Changed
• Browse Source

- version update to 1.6.43
  * Fixed the row width check in png_check_IHDR().
    This corrected a bug that was specific to the 16-bit platforms,
    and removed a spurious compiler warning from the 64-bit builds.
    (Reported by Jacek Caban; fixed by John Bowler)
  * Added eXIf chunk support to the push-mode reader in pngpread.c.
    (Contributed by Chris Blume)
  * Added contrib/pngexif for the benefit of the users who would like
    to inspect the content of eXIf chunks.
  * Added contrib/conftest/basic.dfa, a basic build-time configuration.
    (Contributed by John Bowler)
  * Fixed a preprocessor condition in pngread.c that broke build-time
    configurations like contrib/conftest/pngcp.dfa.
    (Contributed by John Bowler)
  * Added CMake build support for LoongArch LSX.
    (Contributed by GuXiWei)
  * Fixed a CMake build error that occurred under a peculiar state of the
    dependency tree. This was a regression introduced in libpng-1.6.41.
    (Contributed by Dan Rosser)
  * Marked the installed libpng headers as system headers in CMake.
    (Contributed by Benjamin Buch)
  * Updated the build support for RISCOS.
    (Contributed by Cameron Cawley)
  * Updated the makefiles to allow cross-platform builds to initialize
    conventional make variables like AR and ARFLAGS.
  * Added various improvements to the CI scripts in areas like version
    consistency verification and text linting.
  * Added version consistency verification to pngtest.c also.

• Files Changed
• Browse Source

Update libpng to 1.6.42 (forwarded request 1147257 from yannboyer_dev)

• Files Changed
• Browse Source

- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317

• Files Changed
• Browse Source

- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation. (forwarded request 1094720 from pluskalm)

• Files Changed
• Browse Source

- do not use NEON instructions [bsc#1211176]

• Files Changed
• Browse Source

- Fix license tag to libpng-2.0. (forwarded request 1080481 from fcrozat)

• Files Changed
• Browse Source

- Fix build: some*.la files are symlinks. Adjust spec to use
   find -type f,l (forwarded request 1062444 from dimstar)

• Files Changed
• Browse Source

- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp. (forwarded request 1038184 from dimstar)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner

• Files Changed
• Browse Source

Enable SSE optimizations. They are not enabled by default in configure-based builds (see the INSTALL file). (forwarded request 878383 from llunak)

• Files Changed
• Browse Source

- make check actually works under asan

- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)

• Files Changed
• Browse Source

- fix arm build [bsc#1121829]
  + libpng-arm-free.patch

- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp

• Files Changed
• Browse Source

- update to 1.6.36:
   Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
      (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
      (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.

• Files Changed
• Browse Source

- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch

• Files Changed
• Browse Source

- %{libname} package provides libpng = %{version} again 
  [bsc#1079342]

• Files Changed
• Browse Source