Changelog for libpng-devel-1.2.39-2.2.x86_64.rpm :

* Thu Aug 13 2009 pgajdosAATTsuse.cz- updated to 1.2.39:
* Added a prototype for png_64bit_product() in png.c
* Avoid a possible NULL dereference in debug build, in png_set_text_2()
* Relocated new png_64_bit_product() prototype into png.h
* Replaced
*.tar.lzma with
*.txz in distribution.
* Reject attempt to write iCCP chunk with negative embedded profile length.
* Mon Jul 20 2009 pgajdosAATTsuse.cz- updated to 1.2.38:
* Revised libpng
*.txt and libpng.3 to mention calling png_set_IHDR() multiple times and to specify the sample order in the tRNS chunk, because the ISO PNG specification has a typo in the tRNS table.
* Changed several PNG_UNKNOWN_CHUNK_SUPPORTED to PNG_HANDLE_AS_UNKNOWN_SUPPORTED, to make the png_set_keep mechanism available for ignoring known chunks even when not saving unknown chunks.
* Adopted preference for consistent use of \"#ifdef\" and \"#ifndef\" versus \"#if defined()\" and \"if !defined()\" where possible.
* Added PNG_NO_HANDLE_AS_UNKNOWN in the PNG_LEGACY_SUPPORTED block of pngconf.h, and moved the various unknown chunk macro definitions outside of the PNG_READ|WRITE_ANCILLARY_CHUNK_SUPPORTED blocks.
* Thu Jun 04 2009 pgajdosAATTsuse.cz- updated to 1.2.37:
* fixed bug with new png_memset() of the big_row_buffer
* Tue May 12 2009 pgajdosAATTsuse.cz- updated to 1.2.36 (see CHANGES)
* Mon Feb 23 2009 pgajdosAATTsuse.cz- fixes possible double free [bnc#472745] (CVE-2009-0040)
* Mon Jan 19 2009 pgajdosAATTsuse.cz- updated to 1.2.34:
* fixes CVE-2008-3964 (removed CVE-2008-3964.patch)
* Tue Jan 13 2009 olhAATTsuse.de- obsolete old -XXbit packages (bnc#437293)
* Mon Sep 15 2008 pgajdosAATTsuse.cz- fixed CVE-2008-3964 [bnc#424739]
* CVE-2008-3964.patch
* Thu Sep 11 2008 pgajdosAATTsuse.cz- updated to version 1.2.31:
* coding bugfixes and enhancements
* Mon Sep 01 2008 ajAATTsuse.de- Do not package la files.
* Mon Jun 23 2008 pgajdosAATTsuse.cz- updated to 1.2.29:
* fixes to the configure-related build-scripts
* security fix that affects programs that attempt to do special handling of unknown PNG chunks (presumably very few such programs), along with a reversion to previous behavior for handling of images with out-of-range tRNS-chunk values [bnc#378634]
* fix for unintentional gray-to-RGB conversion in png_set_expand_gray_1_2_4_to_8()
* various other minor fixes- removed makefile-am.patch, issue fixed upstream
* Sun May 11 2008 cooloAATTsuse.de- fix rename of xxbit packages
* Tue Apr 22 2008 pgajdosAATTsuse.cz- $(ECHO) substituted by echo in Makefile.in -- fixes package build in beta (makefile-am.patch)
* Thu Apr 10 2008 roAATTsuse.de- added baselibs.conf file to build xxbit packages for multilib support
* Thu Apr 03 2008 pgajdosAATTsuse.cz- updated to 1.2.26:
* fixed minor coding errors that could lead to crashes in exceptional cases
* Thu Dec 06 2007 mrueckertAATTsuse.de- added provides/obsoletes for the old package
* Fri Nov 30 2007 nadvornikAATTsuse.cz- updated to 1.2.23:
* more sanity checks, fixes [#332249]- adjusted to Shared Library Policy:
* renamed package libpng to libpng12-0
* created compatibility package libpng3
* Wed Jul 11 2007 nadvornikAATTsuse.cz- updated to 1.2.18:
* security fixes merged upstream
* Thu Mar 29 2007 ajAATTsuse.de- Add zlib-devel to BuildRequires.
* Thu Nov 23 2006 nadvornikAATTsuse.cz- fixed crash on malformed sPLT chunks CVE-2006-5793 [#219007]
* Mon Jul 17 2006 nadvornikAATTsuse.cz- make sure PNG_NO_ASSEMBLER_CODE is used consistently