giflib/giflib.changes
Ismail Dönmez a635d5eed4 - Update to version 5.1.3
* Prevent malloc randomess from causing the header output routine
   to emit a GIF89 version string even when no GIF89 features are
   present.
 * Prevent malloc randomess from producing sporadic failures by causing
   sanity checks added in 5.1.2 to misfire.
 * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
   Heap overflow in gif2rgb with images of size 0, also sf#82.
 * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
   introduced in 5.1.2.
 * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/giflib?expand=0&rev=37
2016-03-23 08:28:51 +00:00

340 lines
12 KiB
Plaintext

-------------------------------------------------------------------
Wed Mar 23 08:23:32 UTC 2016 - idonmez@suse.com
- Update to version 5.1.3
* Prevent malloc randomess from causing the header output routine
to emit a GIF89 version string even when no GIF89 features are
present.
* Prevent malloc randomess from producing sporadic failures by causing
sanity checks added in 5.1.2 to misfire.
* Bulletproof gif2rgb against 0-height images. Addressed sf#78:
Heap overflow in gif2rgb with images of size 0, also sf#82.
* Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
introduced in 5.1.2.
* Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88
-------------------------------------------------------------------
Tue Jan 19 12:59:02 UTC 2016 - fstrba@suse.com
- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
* Code Fixes
+ Code hardening using reallocarray() from OpenBSD.
+ Sanity check in giffilter catches files with malformed
extension records. Fixes SourceForge bug #63: malformed gif
causes segfault in giffilter.
+ Inexpensive sanity check in DGifSlurp() catches malformed files
with no image descriptor. Fixes SourceForge bug #64: malformed
gif causes crash in giftool.
+ Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
constant input parameter.
+ Bail out of GIF read on invalid pixel width. Addresses Savannah
bug #67: invalid shift in dgif_lib.c
+ Fix SourceForge bug #69: #69 Malformed: Gif file with no
extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
segfault (in giftext).
+ Fix SourceForge bug #71: Buffer overwrite when giffixing a
malformed gif.
+ Fix SourceForge bug #73: Null pointer deference in gifclrmap
(only reachable with malformed GIF).
+ Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
for any valid gif image.
+ Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
use of va_arg.
+ Sanity check in giffix catches some malformed files. Addresses
SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
* giflib-automake-1_13.patch
* giflib-visibility.patch
+ rediff to changed context
-------------------------------------------------------------------
Thu Jan 15 13:36:49 UTC 2015 - tchvatal@suse.com
- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning
-------------------------------------------------------------------
Wed Jan 14 22:39:16 UTC 2015 - p.drouand@gmail.com
- Update to version 5.1.1
+ Numerous minor fixes in getarg.c. Affects only the utilities, not the
core library.
+ Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
+ SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
+ Fix SourceForge bug #61 Leak in gifsponge.
+ glibtoolize port fix for OS X.
-------------------------------------------------------------------
Fri May 30 14:36:54 UTC 2014 - jengelh@inai.de
- Update to new upstream release 5.1.0
* Minor API change to assist library wrappers in dynamic languages,
removal of the the gif2raw utility, and various minor fix patches
for unusual edge cases.
* API changes to functions:
GifErrorString returns const char *;
EGifGetGifVersion returns const char *;
EGifCloseFile takes another int *errorcode;
DGifCloseFile takes another int *errorcode;
-------------------------------------------------------------------
Sat Aug 31 10:42:33 UTC 2013 - jengelh@inai.de
- Update to new upstream release 5.0.5 (bugfix release)
* This release sets the error return properly when a screen
descriptor read fails, and fixes minor API documentation bugs.
-------------------------------------------------------------------
Wed Jun 26 00:43:20 UTC 2013 - jengelh@inai.de
- Update to new upstream release 5.0.4
* Fix for a rare misrendering bug when a GIF overruns the
decompression-code table.
- Make patches have -p1, as requested by
http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines
-------------------------------------------------------------------
Wed Mar 27 08:31:44 UTC 2013 - mmeister@suse.com
- Added url as source.
Please see http://en.opensuse.org/SourceUrls
-------------------------------------------------------------------
Sat Mar 2 10:13:17 UTC 2013 - seife+obs@b1-systems.com
- add giflib-automake-1_13.patch, fix build with automake-1.13.1
-------------------------------------------------------------------
Fri Jan 11 22:13:53 UTC 2013 - jengelh@inai.de
- Remove "Obsoletes: giflib", because libgif6 must not obsolete
libgif4 (it would do that by way of libgif4's "Provides: giflib").
-------------------------------------------------------------------
Fri Jan 4 15:02:09 UTC 2013 - jengelh@inai.de
- Adjust baselibs.conf for libgif6, remove libungif rpm symbols
since they are now no longer provided.
-------------------------------------------------------------------
Sun Dec 30 22:31:28 UTC 2012 - crrodriguez@opensuse.org
- Version 5.0.3
* The library is now purely reentrant and thread-safe
* Adds an EGifSetGifVersion() entry point
* All names of exported functions now have a Gif, DGif, or EGif prefix.
- packaging changes:
* soname is now libgif6
* Compatibility with ancient "libungif" via rpm spec file hacks
is no longer included, if there is any application around
that still requires this it has to be fixed.
-------------------------------------------------------------------
Sun Feb 5 16:23:36 UTC 2012 - jengelh@medozas.de
- Remove redundant tags/sections
-------------------------------------------------------------------
Mon Oct 10 02:57:31 UTC 2011 - crrodriguez@opensuse.org
- annotate functions from gif_lib_private.h with visibility
hidden so they are not exported.
-------------------------------------------------------------------
Sat Oct 1 05:39:13 UTC 2011 - coolo@suse.com
- add libtool as buildrequire to make the spec file more reliable
-------------------------------------------------------------------
Wed Sep 21 10:59:15 UTC 2011 - jengelh@medozas.de
- Correct project URL
- Implement shlib naming (libgif4)
- Apply packaging guidelines (remove redundant/obsolete
tags/sections from specfile, etc.)
-------------------------------------------------------------------
Sun Aug 29 23:15:24 UTC 2010 - cristian.rodriguez@opensuse.org
- Do not use __Date__ and __TIME__ , make build-compare
happier
-------------------------------------------------------------------
Thu Dec 17 20:50:13 CET 2009 - jengelh@medozas.de
- add baselibs.conf as a source
-------------------------------------------------------------------
Tue Jan 13 16:19:37 CET 2009 - olh@suse.de
- obsolete old libungif-64bit on ppc64 (bnc#437293)
-------------------------------------------------------------------
Wed Dec 10 12:34:56 CET 2008 - olh@suse.de
- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
(bnc#437293)
-------------------------------------------------------------------
Mon Nov 24 12:34:56 CET 2008 - olh@suse.de
- obsolete old -XXbit packages (bnc#437293)
-------------------------------------------------------------------
Sat Aug 30 14:55:14 CEST 2008 - crrodriguez@suse.de
- update to version 4.1.6, changes since 4.1.4 includes:
* Fix segfault in utilities due to referencing ColorMaps in GifFiles that had
no ColorMap present.
* Fix gif2x11 to work on 24 bit displays.
* Fix for giftext segfault when the GifFile does not store a global colormap.
* Checks to fail gracefully when an image contains improper LZ codes.
* Close file handles on failure in DGifOpenFileHandle()
* Checks to operate on files in binary mode on WIN32 as well as MSDOS.
- kill "la" files and static libraries
-------------------------------------------------------------------
Thu Apr 10 12:54:45 CEST 2008 - ro@suse.de
- added baselibs.conf file to build xxbit packages
for multilib support
-------------------------------------------------------------------
Wed Aug 16 20:28:34 CEST 2006 - aj@suse.de
- Replace xorg-x11-devel BuildRequires with really needed libs.
- Fix configure call for X11 R7.
-------------------------------------------------------------------
Wed Jan 25 21:30:18 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Thu Jan 12 16:17:07 CET 2006 - nadvornik@suse.cz
- compile with -fstack-protector
-------------------------------------------------------------------
Tue Jan 3 12:21:11 CET 2006 - nadvornik@suse.cz
- updated to 4.1.4
-------------------------------------------------------------------
Tue Apr 26 21:19:18 CEST 2005 - jw@suse.de
- fixed EGifCompressLine for 64bit archs,
to make perl-Prima testcases happy.
-------------------------------------------------------------------
Tue Sep 14 16:30:45 CEST 2004 - nadvornik@suse.cz
- fixed provides on 64bit architectures [#44842]
-------------------------------------------------------------------
Thu Sep 09 14:13:20 CEST 2004 - nadvornik@suse.cz
- added Provides: libungif.so.4 [#44842]
-------------------------------------------------------------------
Wed Sep 01 13:51:38 CEST 2004 - nadvornik@suse.cz
- updated to giflib 4.1.3: LZW is enabled again
- renamed libungif -> giflib
ungif -> giflib-progs
- new subpackage giflib-devel
- added compatibility symlinks
-------------------------------------------------------------------
Tue Feb 24 21:43:47 CET 2004 - kukuk@suse.de
- Cleanup neededforbuild
-------------------------------------------------------------------
Sat Jan 10 18:20:46 CET 2004 - adrian@suse.de
- add %defattr and %run_ldconfig
-------------------------------------------------------------------
Mon Feb 11 11:36:10 CET 2002 - schwab@suse.de
- Fix use of varargs.
-------------------------------------------------------------------
Wed Feb 6 10:54:53 CET 2002 - nadvornik@suse.cz
- updated to 4.1.0b1:
- bugfix release
-------------------------------------------------------------------
Tue Jan 8 17:00:30 CET 2002 - nadvornik@suse.cz
- used macros %{_lib} and %{_libdir}
-------------------------------------------------------------------
Tue Jun 12 12:08:36 CEST 2001 - ro@suse.de
- libtoolize to build
-------------------------------------------------------------------
Tue Jun 5 18:17:54 CEST 2001 - schwab@suse.de
- Change DumpScreen2Gif parameters to long.
-------------------------------------------------------------------
Thu May 24 18:10:55 CEST 2001 - pblaha@suse.cz
- fix cast pointer on ia64
-------------------------------------------------------------------
Wed Apr 18 09:59:04 CEST 2001 - pblaha@suse.cz
- patch from nadvornik@suse.cz for bug in loading images
-------------------------------------------------------------------
Mon Apr 9 01:10:42 CEST 2001 - ro@suse.de
- fixed group tag
-------------------------------------------------------------------
Wed May 17 15:51:01 CEST 2000 - bubnikv@suse.cz
- fixed bug of $chmod 755 libungif.so* (missing $RPM_BUILD_ROOT)
- spec file cleanup
-------------------------------------------------------------------
Mon May 15 12:10:06 CEST 2000 - nadvornik@suse.cz
- added BuildRoot
- added URL
-------------------------------------------------------------------
Tue Apr 4 18:04:59 CEST 2000 - bk@suse.de
- config.{sub,guess} update macro needs automake
-------------------------------------------------------------------
Sat Apr 1 23:05:01 CEST 2000 - bk@suse.de
- suse s390 team added required %suse_update_config for s390
-------------------------------------------------------------------
Mon Sep 13 17:23:57 CEST 1999 - bs@suse.de
- ran old prepare_spec on spec file to switch to new prepare_spec.
-------------------------------------------------------------------
Tue Jun 29 12:29:15 MEST 1999 - ro@suse.de
- split: ungif (containing the tools) is build as a separate package
-------------------------------------------------------------------
Tue Apr 6 17:15:24 MEST 1999 - ro@suse.de
- initial package