[pkgsrc/pkgsrc-2007Q1]: pkgsrc/graphics/png Pullup ticket 2087 - requested by...

[salo <salo%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/271d17e81e26
branches:  pkgsrc-2007Q1
changeset: 527380:271d17e81e26
user:      salo <salo%pkgsrc.org@localhost>
date:      Wed May 16 21:07:35 2007 +0000

description:
Pullup ticket 2087 - requested by wiz
security update for png

Revisions pulled up:
- pkgsrc/graphics/png/Makefile                          1.91
- pkgsrc/graphics/png/distinfo                          1.38

   Module Name:         pkgsrc
   Committed By:        wiz
   Date:                Wed May 16 19:34:38 UTC 2007

   Modified Files:
        pkgsrc/graphics/png: Makefile distinfo

   Log Message:
   Update to 1.2.18:

   version 1.2.17beta1 [March 6, 2007]
     Revised scripts/CMakeLists.txt to install both shared and static libraries.
     Deleted a redundant line from pngset.c.

   version 1.2.17beta2 [April 26, 2007]
     Relocated misplaced test for png_ptr == NULL in pngpread.c
     Change "==" to "&" for testing PNG_RGB_TO_GRAY_ERR & PNG_RGB_TO_GRAY_WARN
       flags.
     Changed remaining instances of PNG_ASSEMBLER_* to PNG_MMX_*
     Added pngerror() when write_IHDR fails in deflateInit2().
     Added "const" to some array declarations.
     Mention examples of libpng usage in the libpng*.txt and libpng.3 documents.

   version 1.2.17rc1 [May 4, 2007]
     No changes.

   version 1.2.17rc2 [May 8, 2007]
     Moved several PNG_HAVE_* macros out of PNG_INTERNAL because applications
       calling set_unknown_chunk_location() need them.
     Changed transformation flag from PNG_EXPAND_tRNS to PNG_EXPAND in
       png_set_expand_gray_1_2_4_to_8().
     Added png_ptr->unknown_chunk to hold working unknown chunk data, so it
       can be free'ed in case of error.  Revised unknown chunk handling in
       pngrutil.c and pngpread.c to use this structure.

   version 1.2.17rc3 [May 8, 2007]
     Revised symbol-handling in configure script.

   version 1.2.17rc4 [May 10, 2007]
     Revised unknown chunk handling to avoid storing unknown critical chunks.

   version 1.2.17 [May 15, 2007]
     Added "png_ptr->num_trans=0" before error return in png_handle_tRNS,
       to eliminate a vulnerability (CVE-2007-2554, CERT VU#684664)

   version 1.2.18 [May 15, 2007]
     Reverted the libpng-1.2.17rc3 change to symbol-handling in configure script

diffstat:

 graphics/png/Makefile |  4 ++--
 graphics/png/distinfo |  8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diffs (28 lines):

diff -r 54cd229001af -r 271d17e81e26 graphics/png/Makefile
--- a/graphics/png/Makefile     Tue May 15 23:54:12 2007 +0000
+++ b/graphics/png/Makefile     Wed May 16 21:07:35 2007 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.90 2007/02/02 19:12:31 wiz Exp $
+# $NetBSD: Makefile,v 1.90.2.1 2007/05/16 21:07:35 salo Exp $
 
-DISTNAME=      libpng-1.2.16
+DISTNAME=      libpng-1.2.18
 PKGNAME=       ${DISTNAME:S/lib//}
 CATEGORIES=    graphics
 MASTER_SITES=  ${MASTER_SITE_SOURCEFORGE:=libpng/} \
diff -r 54cd229001af -r 271d17e81e26 graphics/png/distinfo
--- a/graphics/png/distinfo     Tue May 15 23:54:12 2007 +0000
+++ b/graphics/png/distinfo     Wed May 16 21:07:35 2007 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.37 2007/02/02 19:12:31 wiz Exp $
+$NetBSD: distinfo,v 1.37.2.1 2007/05/16 21:07:35 salo Exp $
 
-SHA1 (libpng-1.2.16.tar.bz2) = 0b37d42d2ae33c22093d46a28e6b8fa21eb4c1da
-RMD160 (libpng-1.2.16.tar.bz2) = a328e6f4c8b10480b6f13d4fdcb5863fd42c357b
-Size (libpng-1.2.16.tar.bz2) = 624085 bytes
+SHA1 (libpng-1.2.18.tar.bz2) = 42156e45fa999b242dc63c261e9253ce0dd810ab
+RMD160 (libpng-1.2.18.tar.bz2) = ea81056a896eb038fa5d7fde2b7fa626c1a2e31e
+Size (libpng-1.2.18.tar.bz2) = 623690 bytes
 SHA1 (patch-aa) = 4b6437906e6f2f644c731a293859e64f69300bb0
 SHA1 (patch-ac) = 87850d6ac555f1d8863a96d287a1ccccfa89230b
 SHA1 (patch-ae) = b9bf9de3caa32ac78a17685cdd5df5b80d1ccbbf