Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libpng16 for openSUSE:Factory checked in at 2026-10-03 20:12:20 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libpng16 (Old) and /work/SRC/openSUSE:Factory/.libpng16.new.1631729 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libpng16" Sat Oct 3 20:12:20 2026 rev:68 rq:1382035 version:1.6.59 Changes: -------- --- /work/SRC/openSUSE:Factory/libpng16/libpng16.changes 2026-09-15 17:10:12.890844294 +0200 +++ /work/SRC/openSUSE:Factory/.libpng16.new.1631729/libpng16.changes 2026-10-03 20:12:21.476650121 +0200 @@ -1,0 +2,18 @@ +Fri Oct 2 07:01:55 UTC 2026 - Petr Gajdos <[email protected]> + +- version update to 1.6.59: + * Fixed CVE-2026-46675 (medium severity): + Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt + or iCCP decompression. + (Reported independently by Ze Sheng and + <[email protected]>.) + * Fixed a regression introduced in version 1.6.47 that caused libpng to reject + hIST chunks in their correct position, after PLTE. + (Contributed by Yuki Sekiguchi.) + * Prevented a double free of `png_struct` members after an allocation failure. + (Contributed by Anthony Hurtado.) + * Applied fixes and updates to the CMake build. + * Adopted the REUSE Specification for licensing the CI files. +- fixes CVE-2026-46675 [bsc#1283183] + +------------------------------------------------------------------- @@ -9 +27 @@ -- version update to 1.6.58: +- version update to 1.6.58 [jsc#PED-16190]: Old: ---- libpng-1.6.58.tar.gz New: ---- libpng-1.6.59.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libpng16.spec ++++++ --- /var/tmp/diff_new_pack.aVyTvV/_old 2026-10-03 20:12:22.436690280 +0200 +++ /var/tmp/diff_new_pack.aVyTvV/_new 2026-10-03 20:12:22.438690364 +0200 @@ -20,7 +20,7 @@ %define asan_build 0 %define major 1 %define minor 6 -%define micro 58 +%define micro 59 %define branch %{major}%{minor} %define libname libpng%{branch}-%{branch} %define debug_package_requires %{libname} = %{version}-%{release} ++++++ libpng-1.6.58.tar.gz -> libpng-1.6.59.tar.gz ++++++ ++++ 5428 lines of diff (skipped)
