Update libvips to 8.6.3

[atomicules <base%atomicules.co.uk@localhost>]

Module Name:	pkgsrc-wip
Committed By:	atomicules <base%atomicules.co.uk@localhost>
Pushed By:	atomicules
Date:		Sat Mar 10 12:17:58 2018 +0000
Changeset:	f8a7231bf6b5701d6065ff708257409d5dec71dd

Modified Files:
	libvips/Makefile
	libvips/TODO
	libvips/distinfo

Log Message:
Update libvips to 8.6.3

Also deals with CVE-2018-7998

See: 38b1d7b23c700e09b71da9f56252e14551b97b16

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=f8a7231bf6b5701d6065ff708257409d5dec71dd

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 libvips/Makefile | 2 +-
 libvips/TODO     | 4 ----
 libvips/distinfo | 8 ++++----
 3 files changed, 5 insertions(+), 9 deletions(-)

diffs:
diff --git a/libvips/Makefile b/libvips/Makefile
index 46ec6469fa..d02d16e568 100644
--- a/libvips/Makefile
+++ b/libvips/Makefile
@@ -1,6 +1,6 @@
 # $NetBSD$
 
-DISTNAME=	vips-8.6.2
+DISTNAME=	vips-8.6.3
 PKGNAME=	lib${DISTNAME}
 CATEGORIES=	graphics
 MASTER_SITES=	${MASTER_SITE_GITHUB:=jcupitt/}
diff --git a/libvips/TODO b/libvips/TODO
index 4047b946fd..460af953b1 100644
--- a/libvips/TODO
+++ b/libvips/TODO
@@ -17,7 +17,3 @@ Makefile:
 options.mk:
 
 - Should add in all the optional dependencies.
-
-This package has known vulnerabilities, please investigate and fix if possible:
-
-- CVE-2018-7998
diff --git a/libvips/distinfo b/libvips/distinfo
index ea0414216a..cc1e4c21af 100644
--- a/libvips/distinfo
+++ b/libvips/distinfo
@@ -1,6 +1,6 @@
 $NetBSD$
 
-SHA1 (vips-8.6.2.tar.gz) = b96c0fded830153fc8a44ab05305c69919c60862
-RMD160 (vips-8.6.2.tar.gz) = f43051c47afc3889159b394ca4243556ba94563c
-SHA512 (vips-8.6.2.tar.gz) = 7a5f0df9b9429508f3288bc163681c314aeca04f8a0bb27ef16f355ba0cd1af8971baef83fe9ee858507c4db06b1c29a8abc6284434e45ec2393fef77861b3ca
-Size (vips-8.6.2.tar.gz) = 12187714 bytes
+SHA1 (vips-8.6.3.tar.gz) = cfad094ab24ab97bb12160c94d4b719bdc57977e
+RMD160 (vips-8.6.3.tar.gz) = 9e3cf45fce7df464db3c1d707459f06f24917f22
+SHA512 (vips-8.6.3.tar.gz) = 60b4517753dc92d5dc1cfe2114106b3ea57d987928e57a55b6f0b3f1cbc845646ac5aab5c765bb6fbecc1ac591b3cf730c1c911fd4b522b5ca6490b449efc0f5
+Size (vips-8.6.3.tar.gz) = 12217832 bytes