- updated to 1.6.28 (fixes CVE-2016-10087)

- when compiled with zlib >= 1.2.9, requires zlib 1.2.9 (handled by versioned symbols rpm dependencies)

diff --git a/libpng.spec b/libpng.spec
index 00ebc57c13f0e64559b8ed4cb3e06edebd2c9b4f..dd906b8c6b90a13ad3b07216fa8ae26019a4c205 100644 (file)
--- a/libpng.spec
+++ b/libpng.spec
@@ -1,4 +1,3 @@
-# TODO: switch to zlib >= 1.2.8.1 when released (for inflateValidate())
 #
 # Conditional build:
 %bcond_without tests           # don't perform "make check"
@@ -12,16 +11,16 @@ Summary(pl.UTF-8):  Biblioteka PNG
 Summary(pt_BR.UTF-8):  Biblioteca PNG
 Summary(tr.UTF-8):     PNG kitaplığı
 Name:          libpng
-Version:       1.6.26
+Version:       1.6.28
 Release:       1
 Epoch:         2
 License:       distributable
 Group:         Libraries
 Source0:       http://downloads.sourceforge.net/libpng/%{name}-%{version}.tar.xz
-# Source0-md5: faed9bb495d2e12dd0c9ec561ca60cd8
+# Source0-md5: 425354f86c392318d31aedca71019372
 Patch0:                %{name}-pngminus.patch
 Patch1:                http://downloads.sourceforge.net/libpng-apng/%{name}-%{version}-apng.patch.gz
-# Patch1-md5:  921d2717418bf74b40b94191c8b282c7
+# Patch1-md5:  fca7c6d87c8352e645facefc2e1dd153
 URL:           http://www.libpng.org/pub/png/libpng.html
 BuildRequires: rpmbuild(macros) >= 1.213
 BuildRequires: tar >= 1:1.22