- add patches from RedHat package: - avoid buffer overflow in ppm loader (CVE-2012-4433) - avoid buffer overflow in gegl_buffer_header_init() - backported: don't leak each node set on a GeglProcessor