CVS commit: [pkgsrc-2012Q2] pkgsrc/graphics/optipng

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Thu Sep 27 11:09:33 UTC 2012

Modified Files:
        pkgsrc/graphics/optipng [pkgsrc-2012Q2]: Makefile distinfo

Log Message:
Pullup ticket #3923 - requested by taca
graphics/optipng: security update

Revisions pulled up:
- graphics/optipng/Makefile                                     1.26-1.27
- graphics/optipng/distinfo                                     1.22-1.23

---
   Module Name: pkgsrc
   Committed By:        adam
   Date:                Sat Sep  1 09:19:20 UTC 2012

   Modified Files:
        pkgsrc/graphics/optipng: Makefile distinfo

   Log Message:
   Changes 0.7.2:
   * Upgraded libpng to version 1.4.12.
   * Upgraded zlib to version 1.2.7-optipng.
   ! Fixed the display of huge (4GB+) file/IDAT sizes on 32-bit platforms.
   ! Issued a proper error message if the output IDAT can't fit in 2GB.
     Acknowledged this limitation in the user manual.
     (Thanks to John Sauter for the report.)
   ! Fixed the output file cleanup that should occur after a write error.
   * Added the option -debug and various undocumented debug features.
   * Moved the PNG reduction module (opngreduc) to a separate sub-project.

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Fri Sep 21 04:07:22 UTC 2012

   Modified Files:
        pkgsrc/graphics/optipng: Makefile distinfo

   Log Message:
   Update optipng to 0.7.3, security fix for SA50654 (CVE-2012-4432).

   Version 0.7.3   16-sep-2012
   -------------
   !! Fixed a use-after-free vulnerability in the palette reduction code.
      This vulnerability was accidentally introduced in version 0.7.


To generate a diff of this commit:
cvs rdiff -u -r1.25 -r1.25.4.1 pkgsrc/graphics/optipng/Makefile
cvs rdiff -u -r1.21 -r1.21.4.1 pkgsrc/graphics/optipng/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.