------------------------------------------------------------------- Tue Apr 12 08:34:44 UTC 2016 - fstrba@suse.com - Update to version 5.1.4 * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT. * Fix SF Bug #92: Fix buffer overread in gifbuild. * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path * Fix SF Bug #89: Fix buffer overread in gifbuild. - Removed patch: * giflib-sf-88.patch + Integrated upstream - Added patch: * giflib-CVE-2016-3977.patch - Fix CVE-2016-3977: heap buffer overflow in gif2rgb (bsc#974847) ------------------------------------------------------------------- Wed Mar 23 08:23:32 UTC 2016 - idonmez@suse.com - Update to version 5.1.3 * Prevent malloc randomess from causing the header output routine to emit a GIF89 version string even when no GIF89 features are present. * Prevent malloc randomess from producing sporadic failures by causing sanity checks added in 5.1.2 to misfire. * Bulletproof gif2rgb against 0-height images. Addressed sf#78: Heap overflow in gif2rgb with images of size 0, also sf#82. * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83 introduced in 5.1.2. * Fix sf#84: incorrect return of DGifSlurp(). - Add giflib-sf-88.patch to fix sf#88 ------------------------------------------------------------------- Tue Jan 19 12:59:02 UTC 2016 - fstrba@suse.com - Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319) * Code Fixes + Code hardening using reallocarray() from OpenBSD. + Sanity check in giffilter catches files with malformed extension records. Fixes SourceForge bug #63: malformed gif causes segfault in giffilter. + Inexpensive sanity check in DGifSlurp() catches malformed files with no image descriptor. Fixes SourceForge bug #64: malformed gif causes crash in giftool. + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying constant input parameter. + Bail out of GIF read on invalid pixel width. Addresses Savannah bug #67: invalid shift in dgif_lib.c + Fix SourceForge bug #69: #69 Malformed: Gif file with no extension block after a GRAPHICS_EXT_FUNC_CODE extension causes segfault (in giftext). + Fix SourceForge bug #71: Buffer overwrite when giffixing a malformed gif. + Fix SourceForge bug #73: Null pointer deference in gifclrmap (only reachable with malformed GIF). + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1, for any valid gif image. + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted use of va_arg. + Sanity check in giffix catches some malformed files. Addresses SourceForge bug #77: dgif_lib.c: extension processing error - Modified patches: * giflib-automake-1_13.patch * giflib-visibility.patch + rediff to changed context ------------------------------------------------------------------- Thu Jan 15 13:36:49 UTC 2015 - tchvatal@suse.com - Cleanup a bit - Remove obsolete sle10 deprecations - Fix one tiny rpmlint warning ------------------------------------------------------------------- Wed Jan 14 22:39:16 UTC 2015 - p.drouand@gmail.com - Update to version 5.1.1 + Numerous minor fixes in getarg.c. Affects only the utilities, not the core library. + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails. + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure. + Fix SourceForge bug #61 Leak in gifsponge. + glibtoolize port fix for OS X. ------------------------------------------------------------------- Fri May 30 14:36:54 UTC 2014 - jengelh@inai.de - Update to new upstream release 5.1.0 * Minor API change to assist library wrappers in dynamic languages, removal of the the gif2raw utility, and various minor fix patches for unusual edge cases. * API changes to functions: GifErrorString returns const char *; EGifGetGifVersion returns const char *; EGifCloseFile takes another int *errorcode; DGifCloseFile takes another int *errorcode; ------------------------------------------------------------------- Sat Aug 31 10:42:33 UTC 2013 - jengelh@inai.de - Update to new upstream release 5.0.5 (bugfix release) * This release sets the error return properly when a screen descriptor read fails, and fixes minor API documentation bugs. ------------------------------------------------------------------- Wed Jun 26 00:43:20 UTC 2013 - jengelh@inai.de - Update to new upstream release 5.0.4 * Fix for a rare misrendering bug when a GIF overruns the decompression-code table. - Make patches have -p1, as requested by http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines ------------------------------------------------------------------- Wed Mar 27 08:31:44 UTC 2013 - mmeister@suse.com - Added url as source. Please see http://en.opensuse.org/SourceUrls ------------------------------------------------------------------- Sat Mar 2 10:13:17 UTC 2013 - seife+obs@b1-systems.com - add giflib-automake-1_13.patch, fix build with automake-1.13.1 ------------------------------------------------------------------- Fri Jan 11 22:13:53 UTC 2013 - jengelh@inai.de - Remove "Obsoletes: giflib", because libgif6 must not obsolete libgif4 (it would do that by way of libgif4's "Provides: giflib"). ------------------------------------------------------------------- Fri Jan 4 15:02:09 UTC 2013 - jengelh@inai.de - Adjust baselibs.conf for libgif6, remove libungif rpm symbols since they are now no longer provided. ------------------------------------------------------------------- Sun Dec 30 22:31:28 UTC 2012 - crrodriguez@opensuse.org - Version 5.0.3 * The library is now purely reentrant and thread-safe * Adds an EGifSetGifVersion() entry point * All names of exported functions now have a Gif, DGif, or EGif prefix. - packaging changes: * soname is now libgif6 * Compatibility with ancient "libungif" via rpm spec file hacks is no longer included, if there is any application around that still requires this it has to be fixed. ------------------------------------------------------------------- Sun Feb 5 16:23:36 UTC 2012 - jengelh@medozas.de - Remove redundant tags/sections ------------------------------------------------------------------- Mon Oct 10 02:57:31 UTC 2011 - crrodriguez@opensuse.org - annotate functions from gif_lib_private.h with visibility hidden so they are not exported. ------------------------------------------------------------------- Sat Oct 1 05:39:13 UTC 2011 - coolo@suse.com - add libtool as buildrequire to make the spec file more reliable ------------------------------------------------------------------- Wed Sep 21 10:59:15 UTC 2011 - jengelh@medozas.de - Correct project URL - Implement shlib naming (libgif4) - Apply packaging guidelines (remove redundant/obsolete tags/sections from specfile, etc.) ------------------------------------------------------------------- Sun Aug 29 23:15:24 UTC 2010 - cristian.rodriguez@opensuse.org - Do not use __Date__ and __TIME__ , make build-compare happier ------------------------------------------------------------------- Thu Dec 17 20:50:13 CET 2009 - jengelh@medozas.de - add baselibs.conf as a source ------------------------------------------------------------------- Tue Jan 13 16:19:37 CET 2009 - olh@suse.de - obsolete old libungif-64bit on ppc64 (bnc#437293) ------------------------------------------------------------------- Wed Dec 10 12:34:56 CET 2008 - olh@suse.de - use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade (bnc#437293) ------------------------------------------------------------------- Mon Nov 24 12:34:56 CET 2008 - olh@suse.de - obsolete old -XXbit packages (bnc#437293) ------------------------------------------------------------------- Sat Aug 30 14:55:14 CEST 2008 - crrodriguez@suse.de - update to version 4.1.6, changes since 4.1.4 includes: * Fix segfault in utilities due to referencing ColorMaps in GifFiles that had no ColorMap present. * Fix gif2x11 to work on 24 bit displays. * Fix for giftext segfault when the GifFile does not store a global colormap. * Checks to fail gracefully when an image contains improper LZ codes. * Close file handles on failure in DGifOpenFileHandle() * Checks to operate on files in binary mode on WIN32 as well as MSDOS. - kill "la" files and static libraries ------------------------------------------------------------------- Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de - added baselibs.conf file to build xxbit packages for multilib support ------------------------------------------------------------------- Wed Aug 16 20:28:34 CEST 2006 - aj@suse.de - Replace xorg-x11-devel BuildRequires with really needed libs. - Fix configure call for X11 R7. ------------------------------------------------------------------- Wed Jan 25 21:30:18 CET 2006 - mls@suse.de - converted neededforbuild to BuildRequires ------------------------------------------------------------------- Thu Jan 12 16:17:07 CET 2006 - nadvornik@suse.cz - compile with -fstack-protector ------------------------------------------------------------------- Tue Jan 3 12:21:11 CET 2006 - nadvornik@suse.cz - updated to 4.1.4 ------------------------------------------------------------------- Tue Apr 26 21:19:18 CEST 2005 - jw@suse.de - fixed EGifCompressLine for 64bit archs, to make perl-Prima testcases happy. ------------------------------------------------------------------- Tue Sep 14 16:30:45 CEST 2004 - nadvornik@suse.cz - fixed provides on 64bit architectures [#44842] ------------------------------------------------------------------- Thu Sep 09 14:13:20 CEST 2004 - nadvornik@suse.cz - added Provides: libungif.so.4 [#44842] ------------------------------------------------------------------- Wed Sep 01 13:51:38 CEST 2004 - nadvornik@suse.cz - updated to giflib 4.1.3: LZW is enabled again - renamed libungif -> giflib ungif -> giflib-progs - new subpackage giflib-devel - added compatibility symlinks ------------------------------------------------------------------- Tue Feb 24 21:43:47 CET 2004 - kukuk@suse.de - Cleanup neededforbuild ------------------------------------------------------------------- Sat Jan 10 18:20:46 CET 2004 - adrian@suse.de - add %defattr and %run_ldconfig ------------------------------------------------------------------- Mon Feb 11 11:36:10 CET 2002 - schwab@suse.de - Fix use of varargs. ------------------------------------------------------------------- Wed Feb 6 10:54:53 CET 2002 - nadvornik@suse.cz - updated to 4.1.0b1: - bugfix release ------------------------------------------------------------------- Tue Jan 8 17:00:30 CET 2002 - nadvornik@suse.cz - used macros %{_lib} and %{_libdir} ------------------------------------------------------------------- Tue Jun 12 12:08:36 CEST 2001 - ro@suse.de - libtoolize to build ------------------------------------------------------------------- Tue Jun 5 18:17:54 CEST 2001 - schwab@suse.de - Change DumpScreen2Gif parameters to long. ------------------------------------------------------------------- Thu May 24 18:10:55 CEST 2001 - pblaha@suse.cz - fix cast pointer on ia64 ------------------------------------------------------------------- Wed Apr 18 09:59:04 CEST 2001 - pblaha@suse.cz - patch from nadvornik@suse.cz for bug in loading images ------------------------------------------------------------------- Mon Apr 9 01:10:42 CEST 2001 - ro@suse.de - fixed group tag ------------------------------------------------------------------- Wed May 17 15:51:01 CEST 2000 - bubnikv@suse.cz - fixed bug of $chmod 755 libungif.so* (missing $RPM_BUILD_ROOT) - spec file cleanup ------------------------------------------------------------------- Mon May 15 12:10:06 CEST 2000 - nadvornik@suse.cz - added BuildRoot - added URL ------------------------------------------------------------------- Tue Apr 4 18:04:59 CEST 2000 - bk@suse.de - config.{sub,guess} update macro needs automake ------------------------------------------------------------------- Sat Apr 1 23:05:01 CEST 2000 - bk@suse.de - suse s390 team added required %suse_update_config for s390 ------------------------------------------------------------------- Mon Sep 13 17:23:57 CEST 1999 - bs@suse.de - ran old prepare_spec on spec file to switch to new prepare_spec. ------------------------------------------------------------------- Tue Jun 29 12:29:15 MEST 1999 - ro@suse.de - split: ungif (containing the tools) is build as a separate package ------------------------------------------------------------------- Tue Apr 6 17:15:24 MEST 1999 - ro@suse.de - initial package