- version update to 1.3.36

Security Fixes:
    * fix issues found by oss-fuzz project
    * WPG: Fixes for heap buffer overflow.
  Bug fixes:
    * ConstituteImage(): Set image depth appropriately based on the
      storage size specified by StorageType and QuantumDepth.
    * GetImageBoundingBox(): Fix problem that MagickTrimImage with extreme
      fuzz values could produce an image with negative width.
    * ImageToFile(): Improve error handling to avoid possible deferred
      deletion of temporary files, causing unexpected excessive use of
      temporary file space.
    * JNG: Add validations for alpha compression method values and use
      this information to enforce decoding using the appropriate
      sub-format (rather than auto-detecting the format).  Also, address
      memory leaks which may occur if the sub-decoder does something other
      than was expected.
    * MagickCondSignal(): Improvements to conditional signal handler
      registration (which avoids over-riding signal handlers previously
      registered by an API user).
    * ModifyCache(): Fix memory leak.
    * ReadCacheIndexes(): Don't blunder into accessing a null pointer if
      the using code has ignored a previous error report bubled-up from
      SetNexus().
    * MNG: When doing image scaling and the image width or height is 1
      then always use simple pixel replication as per the MNG
      specification.
    * MVG: Fixes to 'push clip-path foo' and 'pop clip-path foo' parsing
      to eliminate a class of malign behavior.
    * MVG: Place an aribrary limit on stroke dash polygon unit maximum

OBS-URL: https://build.opensuse.org/package/show/graphics/GraphicsMagick?expand=0&rev=125

GraphicsMagick.changes

@@ -1,3 +1,93 @@
+-------------------------------------------------------------------
+Mon Dec 28 14:27:07 UTC 2020 - pgajdos@suse.com
+
+- version update to 1.3.36
+  Security Fixes:
+    * fix issues found by oss-fuzz project
+    * WPG: Fixes for heap buffer overflow.
+  Bug fixes:
+    * ConstituteImage(): Set image depth appropriately based on the
+      storage size specified by StorageType and QuantumDepth.
+    * GetImageBoundingBox(): Fix problem that MagickTrimImage with extreme
+      fuzz values could produce an image with negative width.
+    * ImageToFile(): Improve error handling to avoid possible deferred
+      deletion of temporary files, causing unexpected excessive use of
+      temporary file space.
+    * JNG: Add validations for alpha compression method values and use
+      this information to enforce decoding using the appropriate
+      sub-format (rather than auto-detecting the format).  Also, address
+      memory leaks which may occur if the sub-decoder does something other
+      than was expected.
+    * MagickCondSignal(): Improvements to conditional signal handler
+      registration (which avoids over-riding signal handlers previously
+      registered by an API user).
+    * ModifyCache(): Fix memory leak.
+    * ReadCacheIndexes(): Don't blunder into accessing a null pointer if
+      the using code has ignored a previous error report bubled-up from
+      SetNexus().
+    * MNG: When doing image scaling and the image width or height is 1
+      then always use simple pixel replication as per the MNG
+      specification.
+    * MVG: Fixes to 'push clip-path foo' and 'pop clip-path foo' parsing
+      to eliminate a class of malign behavior.
+    * MVG: Place an aribrary limit on stroke dash polygon unit maximum
+      length in order to avoid possibly rendering "forever".
+    * PCL: No longer attempt to handle reading HP PCL format via the
+      external 'hp2xx' program since it seems worthless for that task.
+    * PS: Fix corrupt image when writing PseudoClass image with a colormap
+      larger than two entries as bilevel.
+    * SVG: Memory leak fixes.
+    * SVG reader: Now support 'ping' support so the identify command works
+      as expected.
+    * TIFF: WEBP compression only supports a depth of 8 so force that
+      value.
+    * Wand MagickSetSamplingFactors(): Correct formatting of sampling
+      factors string.
+    New Features:
+    * Logging is now fully programmable.
+    * DPX format: Support dpx:swap-samples-read define which behaves
+      similar to dpx:swap-samples, but is only applied when reading, as
+      well as dpx:swap-samples-write, which is only applied when
+      writing. This provides for use when there is both reading and
+      writing in the same operation (otherwise the final result was no
+      effect!).
+  API Updates:
+    * magick/api.h: Add "magick/enum_strings.h" to API headers.
+    * New log settings accessor C functions: SetLogDefaultFileName(),
+      SetLogDefaultFormat(), SetLogDefaultOutputType(),
+      SetLogDefaultLogMethod(), SetLogDefaultLimit(),
+      SetLogDefaultGenerations(), SetLogDefaultEventType().  These
+      functions allow a program to set the same parameters which may be
+      set by loading a "log.mgk" function.  If a default logging callback
+      was provided via SetLogDefaultLogMethod() such that MethodOutput is
+      used, then the search for a "log.mgk" is avoided entirely.
+    * New log settings accessor C++ functions: SetLogDefaultFileName(),
+      SetLogDefaultFormat(), SetLogDefaultOutputType(),
+      SetLogDefaultLogMethod(), SetLogDefaultLimit(),
+      SetLogDefaultGenerations(), SetLogDefaultEventType().  These C++
+      functions just pass through to the equivalent C functions and
+      provide the same benefits.
+    * A simple resource-limit respecting memory allocator has been
+      developed for internal use wherever arbitrarily-large amounts of
+      memory might be requested.  This will gradually be added wherever it
+      appears to be needed.  The memory resource limits are at the overall
+      process level.  The MVG/SVG rendering code is updated to use this
+      new allocator.  Almost all of the coders (image format
+      readers/writers) have now been updated to use this new allocator.
+      This means that '-limit memory 300MB' would be more complete and
+      meaningful now.  Temporary allocations by the image processing
+      algorithms (other than for the images themselves) are still not
+      accounted for in the resource limiting.
+    * MVG Renderer / DrawImage(): Use resource-limit respecting memory
+      allocators for remaining large memory allocations.
+    * PNG writer: Don't skip optional Exif identifier code if it isn't present.
+    * DPX reader/writer: decode/encode of 10-bit packed DPX is now twice
+      as fast due to code simplification.
+    * TIFF reader: Apply the same resource limits to TIFF tile sizes as
+      apply to the image itself.
+- deleted patches
+  - GraphicsMagick-CVE-2020-12672.patch (upstreamed)
+
 -------------------------------------------------------------------
 Tue Aug 25 09:00:35 UTC 2020 - Callum Farmer <callumjfarmer13@gmail.com>