- fix CVE-2024-38526 [bsc#1227693] Polyfill Supplay Chain Attack

- version update to 11.7.0
  * Release 11.07.00
    + libnetpbm: Fix double free crash when memory allocation via
      REALLOCARRAY fails.  Introduced in Netpbm 10.40 (September
      2007).
    + libnetpbm: Allow color dictionary with more than 1000 entries.
    + ppmhist, ppmtoxpm: Work with color dictionary with more than
      1000 color entries.
    + rgb.txt: Add Resene paint colors, 2010.
  * Release 11.06.00
    + pamcut: add -reportonly.
    + infotopam: Add input validation. 
    + infotopam: Remove input file name from messages.  Add -verbose
      and issue informational message only if it is specified.
    + libnetpbm: Don't ignore garbage at the end of a color specifier
      (e.g. rgbi:0/.5/1xyz).
    + color database: change names of "Spring Green", "Lamp Black",
      and "light grey" to "SpringGreen", "LampBlack", and "LightGrey"
      to be consistent with other color names.
    + pamcut: fix incorrect output when rectangle to cut is entirely
      above the input image.  Invisible junk after image.  Always
      broken.  (The ability to cut outside the input image was new in
      pamcut's predecessor pnmcut in Netpbm 9.7 (August 2000).
    + pamcut: fix incorrect output with PBM input when rectangle to
      cut is entirely below the input image.  Invisible junk after
      image.  Broken in Netpbm 10.44 (September 2008).
    + ppmtowinicon: fix array overrun with 4 and 8 bits per pixel.
      Broken in Netpbm 11.05 (December 2023).

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- version update to 11.2.0
  * jpegtopnm: Add -traceexif
  * pbmtextps: Add -asciihex, -ascii85.
  * pcdovtoppm: remove dependency on obsolete 'tempfile' program.
  * jpegtopnm: Many fixes to -dumpexif.  Always broken.
    (-dumpexif was new in Netpbm 9.18 (September 2001))
  * pamtopng: fix -chroma option: always rejected.  Always broken.
    (pamtopng was new in Netpbm 10.70 (June 2015)).
  * pnmtopng: fix -rgb option: always rejected.  Always broken
    (-rgb was new in Netpbm 10.30 (October 2005)).
  * build: change the way you add the separately distributed
    'hpcdtoppm' code to the build.
  * lot of changes since last version update, see
    https://sourceforge.net/p/netpbm/code/HEAD/tree/advanced/doc/HISTORY
- modified patches
  % netpbm-gcc-warnings.patch (refreshed)
  % netpbm-security-code.patch (refreshed)
  % netpbm-security-scripts.patch (refreshed)
- deleted patches
  - netpbm-tmpfile.patch (upstreamed)
  - ppmforge-fix-overflow.patch (upstreamed)
  - signed-char.patch (upstreamed)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- version update to 10.96.4
    palmtopnm: Fix bug: fails with PackBits input on platform with
    default unsigned char, such as ppc64.  Always broken.  (Ability
    to convert PackBits input was new in Netpbm 10.27 (March 2005).
    sunicontopnm, escp2topbm, mgrtopbm, ybmtopbm, pamcut, pbmpscale,
    pnmcat, pnmpad: Fix arithmetic overrun with ridiculously large
    image.
    pamrubber: Fix bug: random behavior with -quad when you specify
    both points for source or target and the second one is lower in
    the image than the first.  Always broken (Pamrubber was new in
    Netpbm 10.54 (March 2011)).
    libnetpbm: When validating computable size of width and height,
    allow for adding up to 10 instead of 2, to account for rounding
    up to a multiple of 8 in processing bit maps.
    pamtogif: Fix bug: doesn't ignore the input alpha mask when user
    specified -transparent.  Broken in Netpbm 10.37 (December 2006).
    pgmtoppm: Eliminate dependency on color dictionary when user
    does not specify any colors by name.
    pamstereogram: Fix crash with -xbegin=0.  Thanks Scott Pakin.
    Introduced in Netpbm 10.94.
    pamtopng: Fix rejection of all BLACKANDWHITE_ALPHA images with
    message about wrong depth.  Always broken (pamtopng was new in
    Netpbm 10.71 (June 2015)).  Thanks Karol Kosek
    <krkk@krkk.ct8.pl>.
    pamtopng: Fix failure with GRAYSCALE_ALPHA images with maxval
    less than 255.  Always broken (pamtopng was new in Netpbm 10.71
    (June 2015)).  Thanks Karol Kosek <krkk@krkk.ct8.pl>.
    pamtopng: Fix: treats all tuple types that start with BLA as
    BLACKANDWHITE.  Always broken (pamtopng was new in Netpbm 10.71
    (June 2015)).

• Files Changed
• Browse Source

- version update to 10.93.0
  * lot of bug fixes and features, see HISTORY
- modified patches
  % netpbm-disable-jasper.patch (refreshed)
  % netpbm-make.patch (refreshed)
  % netpbm-security-code.patch (refreshed)
  % netpbm-security-scripts.patch (refreshed)
  % netpbm-tmpfile.patch (refreshed)
  % signed-char.patch (refreshed)
- deleted patches
  - netpbm-pbmtonokia-cmdline-txt-null.patch (upstreamed)

• Files Changed
• Browse Source

- added patches
  fix bsc#1170831 -- sent to bryanh@giraffe-data.com on 2020-05-04
  + netpbm-pbmtonokia-cmdline-txt-null.patch

- Add ubsan_build and remove not needed patch netpbm-asan.patch.

• Files Changed
• Browse Source

- version update to 10.88.1
  * anytopnm: Fix unpredictable behavior when file name contains
    spaces.
    pnmquant: Fail if user specifies more than one of -meanpixel,
    -meancolor, and -center, rather than just pick one.
  * pnmremap: Don't output any part of the image if program fails
    because the maxval of input and map file do not match, in a
    case where matching maxval is required, i.e. the user specified
    -firstisdefault or -missingcolor.
  * ppmhist: sort secondarily by RGB with -sort=frequency, so
    output is repeatable.
  * pnmcolormap: Add -splitpix, -splitcol, -splitdim.
    Thanks Vladislav Zavjalov.
  * pbmtext: fix erroneous failure message with long input text.
  * jpeg2ktopam, pamtojpeg2k: fix negative array index.  Always
    broken (pamtojpeg2k was new in Netpbm 10.12 (November 2002)).
  * jpeg2ktopam, pamtojpeg2k: fix assertion failure.  Always
    broken (pamtojpeg2k was new in Netpbm 10.12 (November 2002)).
  * jpeg2ktopam: Fix memory leak after decoder failure.  Always
    broken (pamtojpeg2k was new in Netpbm 10.12 (November 2002)).
  * jpeg2ktopam: fix null pointer dereference.  Always broken
    (pamtojpeg2k was new in Netpbm 10.12 (November 2002)).
  * pnmtorle, rletopnm: fix wild pointer dereference when memory
    allocation fails.  Always broken (programs were added to
    Netpbm in Release 9.0 (April 2000).
  * pamsumm: Fix bug: with -mean and a conflicting option such as
    -sum, the program ignores one of the options.  It should fail.
    Always broken (pamsumm was new in Netpbm 10.21 (March 2004).
    pamfind: Add -machine .
  * Multiple: fix bug: when you specify the same option twice, you

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- enable the test suite
- do no ship pstopnm [bsc#1136936]

• Files Changed
• Browse Source

- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- added patches
  neccessary for running with ASAN
  + netpbm-asan.patch

- version update to 10.86.3
  * pnmtopng: Fix bug: Defaults to no filters.  Should be all
    filters.  Effect is larger PNG output.  Broken after Netpbm
    10.26 (January 2005) but no later than Netpbm 10.35 (August
    2006).
  * pnmtopng: Fix bug: Doesn't allow multiple filter options.
    Broken after Netpbm 10.26 (January 2005) but no later than
    Netpbm 10.35 (August 2006).
  * pnmcrop: Don't allow -borderfile with -reportXXX.  It doesn't
    work.
  * pnmcrop: fix bug: -bgcolor doesn't work.  Always present
    (-bgcolor was introduced in Netpbm 10.86 (March 2019)).
  * pnmcrop: fix bug: incorrect identification of background with
    -bgcolor and PBM or PGM image.  Always present (-bgcolor was
    introduced in Netpbm 10.86 (March 2019)).
  * Add pamfind.
  * Add pambrighten.
  * Add pamhue.
  * pnmcrop: Add -bg-color, bg-corner, -reportfull, -reportsize,
    -blank-image .
  * pamtopng: Add -interlace .
  * pamenlarge: Add -scale, -xscale, -yscale .
  * pamenlarge: Much faster for PBM with xscale factor above 10;
    slightly faster for xscale factor 2-10.

• Files Changed
• Browse Source

- Trim filler wording from descriptions. (forwarded request 662222 from jengelh)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- security update
  * CVE-2018-8975 [bsc#1086777]
    + netpbm-CVE-2018-8975.patch

- updated to 10.82.2
  * Pngtopam: Fix bogus warning of non-square pixels when image does
              not contain pixel resolution information.  Introduced in Netpbm
              10.48 (September 2009)
  * ilbmtoppm: Fix bug: may fail with bogus error message about an
              invalid CLUT chunk if image has a CLUT chunk.  Introduced after
              Netpbm 10.26 (January 2005) and at or before Netpbm 10.35
              (August 2006).
  * pbmtext: Add -wchar.
  * pbmtext: Add -text-dump option.
  * ppmhist: Add color summary to top of output, (except with
    -noheader).
  * pnmremap: Add -randomseed.
  * pnmquant: Add -norandom, -randomseed.
  * pamtogif: Add -noclear option.
  * giftopnm: Check "data width" value from GIF image properly:
    can't be bigger than 11, because the minimum code size is one
    more than the data width and the maximum code size is 12.  (Note
    that GIF spec prohibits anything more than 8).
  * pnmpsnr: Add -targetX options.
  * ppmrainbow: Add "ppmrainbow: " to error messages, like other
    programs.
  * ppmrainbow: improve error message.
  * g3topbm: Fix bug - produces invalid empty PBM image if input
    image is empty.
  * ppmpat: Fix bug - crash or junk output with -camo or -anticamo

• Files Changed
• Browse Source