| AArch64 | |
| ppc64le | |
| s390x | |
| x86-64 |
- Use %autosetup macro. Allows to eliminate the usage of deprecated %patchN
- switched to https url
- version update to 1.2.59
Added png_check_chunk_length() function, and check all chunks except
IDAT against the default 8MB limit; check IDAT against the maximum
size computed from IHDR parameters (Fixes CVE-2017-12652).
Initialize memory allocated by png_inflate to zero, using memset, to
stop an oss-fuzz "use of uninitialized value" detection in png_set_text_2()
due to truncated iTXt or zTXt chunk.
- check with -j1, be explicit
- Fix SRPM group and grammar issues.
- updated to 1.2.57: fixes CVE-2016-10087
- updated to 1.2.56:
Fixed an out-of-range read in png_check_keyword() (Bug report from
Qixue Xiao, CVE-2015-8540).
Added keyword checks to pngset.c
- updated to 1.2.55:
Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(),
png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr).
Fixed incorrect implementation of png_set_PLTE() that uses png_ptr
not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126
vulnerability.
- updated to 1.2.54
- build in build section