summaryrefslogtreecommitdiff
path: root/Build/source/libs/gd/libgd-src/CHANGELOG.md
diff options
context:
space:
mode:
authorAkira Kakuto <kakuto@fuk.kindai.ac.jp>2017-08-30 23:16:19 +0000
committerAkira Kakuto <kakuto@fuk.kindai.ac.jp>2017-08-30 23:16:19 +0000
commit790b3aac7676a49f59a434ea136eb64191a98a2f (patch)
treebc9cafa0ed0d5777700b10be1dbef196ea712a87 /Build/source/libs/gd/libgd-src/CHANGELOG.md
parentda65270cdbb449c68e6e9f06dd8089b64275a2d3 (diff)
libgd 2.2.5
git-svn-id: svn://tug.org/texlive/trunk@45180 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Build/source/libs/gd/libgd-src/CHANGELOG.md')
-rw-r--r--Build/source/libs/gd/libgd-src/CHANGELOG.md72
1 files changed, 72 insertions, 0 deletions
diff --git a/Build/source/libs/gd/libgd-src/CHANGELOG.md b/Build/source/libs/gd/libgd-src/CHANGELOG.md
new file mode 100644
index 00000000000..aa31ecd1250
--- /dev/null
+++ b/Build/source/libs/gd/libgd-src/CHANGELOG.md
@@ -0,0 +1,72 @@
+# Change Log
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](http://keepachangelog.com/)
+and this project adheres to [Semantic Versioning](http://semver.org/).
+
+## [2.2.5] - 2017-08-30
+
+### Security
+- Double-free in gdImagePngPtr(). (CVE-2017-6362)
+- Buffer over-read into uninitialized memory. (CVE-2017-7890)
+
+### Fixed
+- Fix #109: XBM reading fails with printed error
+- Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
+- Fix #357: 2.2.4: Segfault in test suite
+- Fix #386: gdImageGrayScale() may produce colors
+- Fix #406: webpng -i removes the transparent color
+- Fix Coverity #155475: Failure to restore alphaBlendingFlag
+- Fix Coverity #155476: potential resource leak
+- Fix several build issues and test failures
+- Fix and reenable optimized support for reading 1 bps TIFFs
+
+### Added
+- The native MSVC buildchain now supports libtiff and most executables
+
+## [2.2.4] - 2017-01-18
+
+### Security
+- gdImageCreate() doesn't check for oversized images and as such is
+ prone to DoS vulnerabilities. (CVE-2016-9317)
+- double-free in gdImageWebPtr() (CVE-2016-6912)
+- potential unsigned underflow in gd_interpolation.c
+- DOS vulnerability in gdImageCreateFromGd2Ctx()
+
+### Fixed
+- Fix #354: Signed Integer Overflow gd_io.c
+- Fix #340: System frozen
+- Fix OOB reads of the TGA decompression buffer
+- Fix DOS vulnerability in gdImageCreateFromGd2Ctx()
+- Fix potential unsigned underflow
+- Fix double-free in gdImageWebPtr()
+- Fix invalid read in gdImageCreateFromTiffPtr()
+- Fix OOB reads of the TGA decompression buffer
+- Fix #68: gif: buffer underflow reported by AddressSanitizer
+- Avoid potentially dangerous signed to unsigned conversion
+- Fix #304: test suite failure in gif/bug00006 [2.2.3]
+- Fix #329: GD_BILINEAR_FIXED gdImageScale() can cause black border
+- Fix #330: Integer overflow in gdImageScaleBilinearPalette()
+- Fix 321: Null pointer dereferences in gdImageRotateInterpolated
+- Fix whitespace and add missing comment block
+- Fix #319: gdImageRotateInterpolated can have wrong background color
+- Fix color quantization documentation
+- Fix #309: gdImageGd2() writes wrong chunk sizes on boundaries
+- Fix #307: GD_QUANT_NEUQUANT fails to unset trueColor flag
+- Fix #300: gdImageClone() assigns res_y = res_x
+- Fix #299: Regression regarding gdImageRectangle() with gdImageSetThickness()
+- Replace GNU old-style field designators with C89 compatible initializers
+- Fix #297: gdImageCrop() converts palette image to truecolor image
+- Fix #290: TGA RLE decoding is broken
+- Fix unnecessary non NULL checks
+- Fix #289: Passing unrecognized formats to gdImageGd2 results in corrupted files
+- Fix #280: gdImageWebpEx() `quantization` parameter is a misnomer
+- Publish all gdImageCreateFromWebp*() functions and gdImageWebpCtx()
+- Fix issue #276: Sometimes pixels are missing when storing images as BMPs
+- Fix issue #275: gdImageBmpCtx() may segfault for non-seekable contexts
+- Fix copy&paste error in gdImageScaleBicubicFixed()
+
+### Added
+- More documentation
+- Documentation on GD and GD2 formats
+- More tests