Summary: Old version of libpng, needed to run old binaries Name: libpng15 Version: 1.5.30 Release: 14%{?dist} License: zlib URL: http://www.libpng.org/pub/png/ # Note: non-current tarballs get moved to the history/ subdirectory, # so look there if you fail to retrieve the version you want Source0: https://ftp-osl.osuosl.org/pub/libpng/src/libpng15/libpng-%{version}.tar.xz Source1: pngusr.dfa Patch0: libpng15-CVE-2013-6954.patch Patch1: libpng15-CVE-2018-13785.patch BuildRequires: gcc BuildRequires: zlib-devel BuildRequires: make %description The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG (Portable Network Graphics) image format files. This version should be used only if you are unable to use the current version of libpng. %prep %setup -q -n libpng-%{version} %patch0 -p1 %patch1 -p1 # Provide pngusr.dfa for build. cp -p %{SOURCE1} . %build %configure --disable-static %make_build DFA_XTRA=pngusr.dfa %install %make_install # We don't ship .la files. rm -rf $RPM_BUILD_ROOT%{_libdir}/*.la rm -rf $RPM_BUILD_ROOT%{_libdir}/libpng*.so rm -rf $RPM_BUILD_ROOT%{_libdir}/pkgconfig/libpng.pc rm -rf $RPM_BUILD_ROOT%{_libdir}/pkgconfig/libpng15.pc rm -rf $RPM_BUILD_ROOT%{_mandir}/* rm -rf $RPM_BUILD_ROOT%{_includedir}/* rm -rf $RPM_BUILD_ROOT%{_bindir}/* %files %doc LICENSE %{_libdir}/libpng15.so.* %changelog * Mon Aug 09 2021 Mohan Boddu - 1.5.30-14 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 * Fri Apr 16 2021 Mohan Boddu - 1.5.30-13 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 * Tue Jan 26 2021 Fedora Release Engineering - 1.5.30-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering - 1.5.30-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Mon Jul 13 2020 Tom Stellard - 1.5.30-10 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro * Wed Jan 29 2020 Fedora Release Engineering - 1.5.30-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Thu Jul 25 2019 Fedora Release Engineering - 1.5.30-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri Feb 01 2019 Fedora Release Engineering - 1.5.30-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Wed Aug 01 2018 Nikola Forró - 1.5.30-6 - Fix CVE-2018-13785 (#1599947) * Fri Jul 13 2018 Fedora Release Engineering - 1.5.30-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Thu Jun 28 2018 Nikola Forró - 1.5.30-4 - Remove ldconfig from scriptlets * Tue Feb 20 2018 Nikola Forró - 1.5.30-3 - Add missing gcc build dependency * Wed Feb 07 2018 Fedora Release Engineering - 1.5.30-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Tue Oct 03 2017 Nikola Forró - 1.5.30-1 - New upstream release 1.5.30 (#1497008) * Fri Aug 25 2017 Nikola Forró - 1.5.29-1 - New upstream release 1.5.29 (#1485083) * Thu Aug 03 2017 Fedora Release Engineering - 1.5.28-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering - 1.5.28-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Tue Jun 06 2017 Nikola Forró - 1.5.28-3 - Update source URL (#1459082) * Fri Feb 10 2017 Fedora Release Engineering - 1.5.28-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Tue Jan 31 2017 Nikola Forró - 1.5.28-1 - New upstream release 1.5.28 (#1409157) * Mon May 30 2016 Petr Hracek - 1.5.27-1 - New upstream release 1.5.27 (#1340301) * Thu Feb 04 2016 Fedora Release Engineering - 1.5.26-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Wed Jan 06 2016 Petr Hracek - 1.5.26-1 - new upstream release 1.5.26 (#1292647) * Mon Dec 07 2015 Petr Hracek - 1.5.25-1 - new upstream release 1.5.25 (#1288265) * Thu Nov 19 2015 Petr Hracek - 1.5.24-1 - new upstream release 1.5.24 (#1281632) * Wed Nov 18 2015 Petr Hracek - 1.5.23-2 - Security fix CVE-2015-8126 (#1281756, #1282902) * Mon Jul 27 2015 Petr Hracek - 1.5.23-1 - New upstream release 1.5.23 (#1246066) * Wed Jun 17 2015 Fedora Release Engineering - 1.5.22-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Wed Apr 01 2015 Petr Hracek - 1.5.22-1 - Update to libpng 1.5.22 for minor bug fixes (#1206405) - PNG_SAFE_LIMITS macro is eliminated since 1.5.22 version * Mon Jan 19 2015 Petr Hracek - 1.5.21-1 - Update to libpng 1.5.21 for minor bug fixes (#1176908) * Fri Nov 21 2014 Petr Hracek - 1.5.20-1 - Update to libpng 1.5.20 for minor bug fixes (#1166359) * Mon Sep 15 2014 Petr Hracek - 1.5.19-1 - Update to libpng 1.5.19 for minor bug fixes (#1132842) * Sun Aug 17 2014 Fedora Release Engineering - 1.5.18-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 07 2014 Fedora Release Engineering - 1.5.18-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Thu Apr 10 2014 Petr Hracek - 1.5.18-1 - Update to libpng 1.5.18 for minor bug fixes * Wed Jan 29 2014 Petr Hracek - 1.5.17-2 - Adding patch CVE-2013-6954 (#1056856) * Fri Jul 26 2013 Petr Hracek - 1.5.17-1 - Update to libpng 1.5.17 for minor bug fixes * Mon Jun 03 2013 Petr Hracek - 1.5.16-1 - Update to libpng 1.5.16 for minor bug fixes * Mon May 27 2013 Petr Hracek - 1.5.13-3 - this is only renamed package - Delivering only so libraries * Thu Feb 14 2013 Fedora Release Engineering - 2:1.5.13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Thu Sep 27 2012 Tom Lane 2:1.5.13-1 - Update to libpng 1.5.13 for minor bug fixes * Sat Aug 4 2012 Tom Lane 2:1.5.12-1 - Update to libpng 1.5.12 for minor bug fixes - Activate chunk size limits by default, with a very generous default limit * Wed Aug 1 2012 Tom Lane 2:1.5.10-3 - Remove compat subpackage (it's now a separate package "libpng12") - Minor specfile cleanup per suggestions from Tom Callaway Related: #845110 * Thu Jul 19 2012 Fedora Release Engineering - 2:1.5.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Sat Apr 7 2012 Tom Lane 2:1.5.10-1 - Update to libpng 1.5.10 and 1.2.49, for minor security issues (CVE-2011-3048) Resolves: #809597 * Sun Mar 11 2012 Tom Lane 2:1.5.9-1 - Update to libpng 1.5.9 and 1.2.48, for minor security issues (CVE-2011-3045) Resolves: #801667 * Thu Feb 16 2012 Tom Lane 2:1.5.8-2 - Fix CVE-2011-3026 Resolves: #791183 * Fri Feb 3 2012 Tom Lane 2:1.5.8-1 - Update to libpng 1.5.8, for minor security issue (CVE-2011-3464) * Fri Jan 13 2012 Fedora Release Engineering - 2:1.5.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Sun Dec 18 2011 Tom Lane 2:1.5.7-1 - Update to libpng 1.5.7, for assorted minor fixes * Mon Nov 21 2011 Tom Lane 2:1.5.6-2 - Don't include libpng12.pc in the compat subpackage; instead just offer a phony Provides: for it in the devel subpackage * Sat Nov 5 2011 Tom Lane 2:1.5.6-1 - Update to new major release series 1.5.x; includes source-code-incompatible API changes and a soname version bump - Temporarily package 1.2.46 shared library (only) in libpng-compat subpackage so that dependent packages won't be broken while rebuilding proceeds * Thu Jul 14 2011 Tom Lane 2:1.2.46-1 - Update to libpng 1.2.46, includes fixes for CVE-2011-2501, CVE-2011-2690, CVE-2011-2691, CVE-2011-2692 Resolves: #717509 Resolves: #721307 * Tue Feb 08 2011 Fedora Release Engineering - 2:1.2.44-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Sat Jan 29 2011 Ville Skyttä - 2:1.2.44-2 - Use xz compressed source tarball Resolves: #647282 * Tue Jun 29 2010 Tom Lane 2:1.2.44-1 - Update to libpng 1.2.44, includes fixes for CVE-2010-1205 and CVE-2010-2249 Resolves: #609161 * Mon Mar 15 2010 Tom Lane 2:1.2.43-1 - Update to libpng 1.2.43, includes fix for CVE-2010-0205 Related: #566234 * Wed Jan 20 2010 Tom Lane 2:1.2.42-1 - Update to libpng 1.2.42 * Thu Aug 20 2009 Tom Lane 2:1.2.39-1 - Update to libpng 1.2.39 * Fri Jul 24 2009 Fedora Release Engineering - 2:1.2.37-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Sat Jun 13 2009 Tom Lane 2:1.2.37-1 - Update to libpng 1.2.37, to fix CVE-2009-2042 Related: #504782 * Wed Feb 25 2009 Tom Lane 2:1.2.35-1 - Update to libpng 1.2.35, to fix CVE-2009-0040 * Wed Feb 25 2009 Fedora Release Engineering - 2:1.2.34-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Fri Jan 9 2009 Tom Lane 2:1.2.34-1 - Update to libpng 1.2.34 * Thu Dec 11 2008 Caolán McNamara 2:1.2.33-2 - rebuild to get provides pkgconfig(libpng) * Sun Nov 2 2008 Tom Lane 2:1.2.33-1 - Update to libpng 1.2.33 * Tue Sep 9 2008 Tom Lane 2:1.2.31-2 - Apply upstream patch for zTXT buffer overrun (CVE-2008-3964) Related: #461599 * Sat Aug 23 2008 Tom Lane 2:1.2.31-1 - Update to libpng 1.2.31 * Sat May 31 2008 Tom Lane 2:1.2.29-1 - Update to libpng 1.2.29 (fixes low-priority security issue CVE-2008-1382) Related: #441839 * Tue Feb 12 2008 Tom Lane 2:1.2.24-1 - Update to libpng 1.2.24 * Thu Oct 18 2007 Tom Lane 2:1.2.22-1 - Update to libpng 1.2.22, primarily to fix CVE-2007-5269 Related: #324771 * Wed Aug 22 2007 Tom Lane 2:1.2.16-3 - Update License tag - Rebuild to fix Fedora toolchain issues * Wed May 23 2007 Tom Lane 2:1.2.16-2 - Add patch to fix CVE-2007-2445 Related: #239542 * Mon Feb 12 2007 Tom Lane 2:1.2.16-1 - Update to libpng 1.2.16 Resolves: #211705, #216706, #227334 - Separate libpng.a into a -static subpackage - Other minor packaging fixes per Fedora merge review Resolves: #226038 * Mon Oct 02 2006 Jesse Keating - 2:1.2.10-7 - Require pkgconfig in the -devel subpackage as it gets called by /usr/bin/libpng-config * Thu Jul 27 2006 Matthias Clasen - 2:1.2.10-6 - Disable asm on arches other than i386 (#196580) * Wed Jul 12 2006 Jesse Keating - 2:1.2.10-5.1 - rebuild * Thu May 25 2006 Matthias Clasen - 2:1.2.10-5 - Fix some paths in the -config script * Tue May 23 2006 Matthias Clasen - 2:1.2.10-4 - fix multilib conflicts * Mon May 22 2006 Matthias Clasen - 2:1.2.10-3 - Add a comment about the need to keep static libraries * Mon May 22 2006 Matthias Clasen - 2:1.2.10-2 - Re-add static libraries * Thu May 4 2006 Matthias Clasen - 2:1.2.10-1 - Update to 1.2.10 - Drop static libraries * Fri Feb 10 2006 Jesse Keating - 2:1.2.8-2.2.1 - bump again for double-long bug on ppc(64) * Tue Feb 07 2006 Jesse Keating - 2:1.2.8-2.2 - rebuilt for new gcc4.1 snapshot and glibc changes * Fri Dec 09 2005 Jesse Keating - rebuilt * Wed Mar 2 2005 Matthias Clasen - 2:1.2.8-2 - Rebuild with gcc4 * Mon Dec 06 2004 Matthias Clasen - 2:1.2.8-1 - Update to 1.2.8 * Wed Sep 15 2004 Matthias Clasen - 2:1.2.7-1 - Update to 1.2.7 * Tue Aug 17 2004 Matthias Clasen - 2:1.2.6-1 - Update to 1.2.6 - Combine patches * Wed Aug 4 2004 Matthias Clasen 2:1.2.5-9 - Build for FC3 * Fri Jul 30 2004 Matthias Clasen - Include LICENSE. * Fri Jul 23 2004 Matthias Clasen 2:1.2.5-8 - Build for FC2 * Fri Jul 23 2004 Matthias Clasen 2:1.2.5-7 - Replace the patches for individual security problems with the cumulative patch issued by the png developers. - Build for FC1 * Tue Jun 15 2004 Elliot Lee - rebuilt * Mon Jun 14 2004 Matthias Clasen - 2:1.2.5-5 - Rebuild for FC2 * Mon Jun 14 2004 Matthias Clasen - 2:1.2.5-4 - Rebuild for FC1 * Mon Jun 14 2004 Matthias Clasen - 2:1.2.5-3 - Reinstate and improve the transfix patch which got lost sometime ago, but is still needed for CAN-2002-1363 (#125934) * Mon May 24 2004 Than Ngo 2:1.2.5-2 - add patch to link libm automatically - get rid of rpath * Wed May 19 2004 Matthias Clasen 2:1.2.5-1 - 1.2.5 * Mon May 3 2004 Matthias Clasen 2:1.2.2-22 - Redo the out-of-bounds fix in a slightly better way. * Wed Apr 21 2004 Matthias Clasen - Bump release number to disambiguate n-v-rs. * Mon Apr 19 2004 Matthias Clasen - fix a possible out-of-bounds read in the error message handler. #121229 * Tue Mar 02 2004 Elliot Lee - rebuilt * Fri Feb 27 2004 Mark McLoughlin 2:1.2.2-19 - rebuild with changed bits/setjmp.h on ppc * Fri Feb 13 2004 Elliot Lee - rebuilt * Wed Jun 04 2003 Elliot Lee - rebuilt * Tue Jun 3 2003 Jeff Johnson - add explicit epoch's where needed. * Mon Feb 24 2003 Jonathan Blandford 2:1.2.2-15 - change pkg-config to use libdir instead of hardcoding /usr/lib * Mon Feb 24 2003 Elliot Lee - rebuilt * Thu Feb 20 2003 Jonathan Blandford 2:1.2.2-12 - add Provides: libpng.so.3, #67007 * Fri Jan 24 2003 Jonathan Blandford - change requires to include the Epoch * Thu Jan 23 2003 Karsten Hopp 2:1.2.2-11 - Bump & rebuild * Wed Jan 22 2003 Tim Powers - rebuilt * Wed Jan 15 2003 Elliot Lee 2:1.2.2-9 - Bump & rebuild * Thu Dec 12 2002 Tim Powers 2:1.2.2-7 - merge changes in from -6hammer * Fri Jun 21 2002 Tim Powers - automated rebuild * Thu May 23 2002 Tim Powers - automated rebuild * Tue May 7 2002 Bernhard Rosenkraenzer 1.2.2-4 - Don't own {_libdir}/pkgconfig - Don't strip library, that's up to rpm * Tue May 7 2002 Bernhard Rosenkraenzer 1.2.2-3 - Forgot png.h * Mon May 6 2002 Bernhard Rosenkraenzer 1.2.2-2 - Fix compatibility with everyone else. * Thu May 2 2002 Havoc Pennington - 1.2.2 plus makefile patches tarball - update file list to contain versioned libpng only * Wed Jan 09 2002 Tim Powers - automated rebuild * Mon Dec 17 2001 Bernhard Rosenkraenzer 1.2.1-1 - 1.2.1 * Wed Sep 19 2001 Bernhard Rosenkraenzer 1.2.0-1 - 1.2.0 * Mon Jul 16 2001 Trond Eivind Glomsrd - s/Copyright/License/ - fix weird versioning system (epoch was set to "2" in the main package, serial to "1" in the devel package. Huh?) * Wed Jun 20 2001 Than Ngo 1.0.12-1 - update to 1.0.12 - add missing libpng symlink * Thu May 3 2001 Bernhard Rosenkraenzer 1.0.11-2 - libpng-devel requires zlib-devel (since png.h includes zlib.h) (#38883) * Wed May 2 2001 Bernhard Rosenkraenzer 1.0.11-1 - 1.0.11 * Sun Apr 15 2001 Bernhard Rosenkraenzer - 1.0.10 * Tue Feb 6 2001 Bernhard Rosenkraenzer - 1.0.9, fixes Mozilla problems * Tue Dec 12 2000 Bernhard Rosenkraenzer - Rebuild to get rid of 0777 dirs * Wed Nov 15 2000 Bernhard Rosenkraenzer - Remove the workaround for Bug #20018 (from Oct 30). Qt 2.2.2 fixes the problem the workaround addressed. * Mon Oct 30 2000 Bernhard Rosenkraenzer - Work around a problem causing konqueror to segfault in image preview mode (Bug #20018) - Copy SuSE 7.0's patch to handle bad chunks * Sun Sep 3 2000 Florian La Roche - only include the man5 man-pages once in the main rpm * Fri Jul 28 2000 Preston Brown - upgrade to 1.0.8 - fixes small memory leak, other bugs * Thu Jul 13 2000 Prospector - automatic rebuild * Mon Jun 19 2000 Bernhard Rosenkraenzer - patchlevel c - FHSify * Tue Mar 21 2000 Nalin Dahyabhai - update to 1.0.6 * Mon Mar 13 2000 Nalin Dahyabhai - change serial to Epoch to get dependencies working correctly * Fri Feb 11 2000 Nalin Dahyabhai - move buildroot and add URL * Sat Feb 5 2000 Bernhard Rosenkraenzer - strip library - rebuild to compress man pages * Sun Nov 21 1999 Bernhard Rosenkraenzer - 1.0.5 - some tweaks to spec file to make updating easier - handle RPM_OPT_FLAGS * Mon Sep 20 1999 Matt Wilson - changed requires in libpng-devel to include serial - corrected typo * Sun Mar 21 1999 Cristian Gafton - auto rebuild in the new build environment (release 2) * Sun Feb 07 1999 Michael Johnson - rev to 1.0.3 * Thu Dec 17 1998 Cristian Gafton - build for 6.0 * Wed Sep 23 1998 Cristian Gafton - we are Serial: 1 now because we are reverting the 1.0.2 version from 5.2 beta to this prior one - install man pages; set defattr defaults * Thu May 07 1998 Prospector System - translations modified for de, fr, tr * Thu Apr 30 1998 Cristian Gafton - devel subpackage moved to Development/Libraries * Wed Apr 08 1998 Cristian Gafton - upgraded to 1.0.1 - added buildroot * Tue Oct 14 1997 Donnie Barnes - updated to new version - spec file cleanups * Thu Jul 10 1997 Erik Troan - built against glibc