[pkgsrc/pkgsrc-2008Q1]: pkgsrc/graphics/png Pullup ticket 2335 - requested by...

[ghen <ghen%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/c97f920809fd
branches:  pkgsrc-2008Q1
changeset: 540266:c97f920809fd
user:      ghen <ghen%pkgsrc.org@localhost>
date:      Wed Apr 16 19:32:40 2008 +0000

description:
Pullup ticket 2335 - requested by wiz
security update for png

- pkgsrc/graphics/png/Makefile                          1.102, 1.103
- pkgsrc/graphics/png/distinfo                          1.46, 1.47

   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Sun Apr 13 20:25:15 UTC 2008

   Modified Files:
           pkgsrc/graphics/png: Makefile distinfo

   Log Message:
   Update to 1.2.26:

   version 1.2.26beta01 [February 21, 2008]
     Added missing "(" in pngmem.c.  Bug introduced in libpng-1.2.2/1.0.13

   version 1.2.26beta02 [March 12, 2008]
     Refined error message returned from deflateInit2 in pngwutil.c
     Check IHDR length in png_push_read_chunk() before saving it.

   version 1.2.26beta03 [March 16, 2008]
     Revised contrib/gregbook to handle premature end-of-file and file
       read errors correctly.

   version 1.2.26beta04 [March 18, 2008]
     Free png_ptr->big_row_buf and png_ptr->prev_row before allocating
       new copies in png_read_start_row().  Bug introduced in libpng-1.2.22.

   version 1.2.26beta05 [March 19, 2008]
     Removed extra png_free() added in libpng-1.2.26beta04.

   version 1.2.26beta06 [March 19, 2008]
     Avoid reallocating big_row_buf and prev_row when the size does not increase.

   version 1.2.26rc01 [April 2, 2008]
     Ifdef out some code that is unused when interlacing is not supported.
---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Tue Apr 15 13:26:14 UTC 2008

   Modified Files:
           pkgsrc/graphics/png: Makefile distinfo

   Log Message:
   Update to 1.2.27beta3, fixing a possible application security problem.
   See http://libpng.sourceforge.net/Advisory-1.2.26.txt for details.

   Changes since 1.2.26:
   version 1.2.27beta01 [April 12, 2008]
     Fixed bug (introduced in libpng-1.0.5h) with handling zero-length
       unknown chunks.
     Added more information about png_set_keep_unknown_chunks() to the
       documetation.
     Reject tRNS chunk with out-of-range samples instead of masking off
       the invalid high bits as done in since libpng-1.2.19beta5.

   version 1.2.27beta02 [April 13, 2008]
     Revised documentation about unknown chunk and user chunk handling.
     Keep tRNS chunk with out-of-range samples and issue a png_warning().

   version 1.2.27beta03 [April 14, 2008]
     Added check for NULL ptr in TURBOC version of png_free_default().
     Removed several unnecessary checks for NULL before calling png_free().
     Revised png_set_tRNS() so that calling it twice removes and invalidates
       the previous call.
     Revised pngtest to check for out-of-range tRNS samples.

diffstat:

 graphics/png/Makefile |  4 ++--
 graphics/png/distinfo |  8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diffs (28 lines):

diff -r 7c887fd56066 -r c97f920809fd graphics/png/Makefile
--- a/graphics/png/Makefile     Wed Apr 16 19:23:54 2008 +0000
+++ b/graphics/png/Makefile     Wed Apr 16 19:32:40 2008 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.101 2008/02/28 19:55:42 drochner Exp $
+# $NetBSD: Makefile,v 1.101.2.1 2008/04/16 19:32:40 ghen Exp $
 
-DISTNAME=      libpng-1.2.25
+DISTNAME=      libpng-1.2.27beta03
 PKGNAME=       ${DISTNAME:S/lib//}
 CATEGORIES=    graphics
 MASTER_SITES=  ${MASTER_SITE_SOURCEFORGE:=libpng/} \
diff -r 7c887fd56066 -r c97f920809fd graphics/png/distinfo
--- a/graphics/png/distinfo     Wed Apr 16 19:23:54 2008 +0000
+++ b/graphics/png/distinfo     Wed Apr 16 19:32:40 2008 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.45 2008/02/28 19:55:42 drochner Exp $
+$NetBSD: distinfo,v 1.45.2.1 2008/04/16 19:32:40 ghen Exp $
 
-SHA1 (libpng-1.2.25.tar.bz2) = 0afb5738eab00f721e3fbeb9ed76dbdb2b53204f
-RMD160 (libpng-1.2.25.tar.bz2) = fc087e62e95116d59cf3a6880035f1d9e630ae6c
-Size (libpng-1.2.25.tar.bz2) = 638262 bytes
+SHA1 (libpng-1.2.27beta03.tar.bz2) = 56e72d74d1d8ad3b07998bbd9891994858c5e8be
+RMD160 (libpng-1.2.27beta03.tar.bz2) = 482edff69dce56ea2c9a850e01a37e4caaef46fc
+Size (libpng-1.2.27beta03.tar.bz2) = 665285 bytes
 SHA1 (patch-aa) = 27df7893fc54f7e87790850eb9f047155c73f7d3
 SHA1 (patch-ac) = 87850d6ac555f1d8863a96d287a1ccccfa89230b
 SHA1 (patch-ae) = 8c06a09817d414ffffbfd39bdd7d1f4336538bf3