Subject: Re: CVS commit: pkgsrc/graphics/imlib2
To: None <drochner@NetBSD.org>
From: Kouichirou Hiratsuka <hira@po6.nsk.ne.jp>
List: pkgsrc-changes
Date: 11/30/2006 00:10:31
Hello,

At Fri, 24 Nov 2006 12:46:12 +0000 (UTC),
Matthias Drochner wrote:
> Modified Files:
> 	pkgsrc/graphics/imlib2: Makefile PLIST distinfo
> Added Files:
> 	pkgsrc/graphics/imlib2/patches: patch-ca patch-cb patch-cc patch-cd
> 	    patch-ce patch-cf patch-cg
> Removed Files:
> 	pkgsrc/graphics/imlib2/patches: patch-ba patch-bb patch-bc patch-bd
> 
> Log Message:
> fix some insufficient validation of graphics files, patches from Ubuntu
> (CVE-2006-4806, CVE-2006-4807, CVE-2006-4808, CVE-2006-4809)
> update to 1.3.0 (no changelog available)
> 
> 
> To generate a diff of this commit:
> cvs rdiff -r1.40 -r1.41 pkgsrc/graphics/imlib2/Makefile
> cvs rdiff -r1.7 -r1.8 pkgsrc/graphics/imlib2/PLIST
> cvs rdiff -r1.16 -r1.17 pkgsrc/graphics/imlib2/distinfo
> cvs rdiff -r1.1 -r0 pkgsrc/graphics/imlib2/patches/patch-ba \
>     pkgsrc/graphics/imlib2/patches/patch-bb \
>     pkgsrc/graphics/imlib2/patches/patch-bc \
>     pkgsrc/graphics/imlib2/patches/patch-bd
> cvs rdiff -r0 -r1.1 pkgsrc/graphics/imlib2/patches/patch-ca \
>     pkgsrc/graphics/imlib2/patches/patch-cb \
>     pkgsrc/graphics/imlib2/patches/patch-cc \
>     pkgsrc/graphics/imlib2/patches/patch-cd \
>     pkgsrc/graphics/imlib2/patches/patch-ce \
>     pkgsrc/graphics/imlib2/patches/patch-cf \
>     pkgsrc/graphics/imlib2/patches/patch-cg

The patch-aa exists, but its checksum doesn't exist in distinfo.

=> Applying pkgsrc patches for imlib2-1.3.0
**************************************
Ignoring patch file /usr/pkgsrc/graphics/imlib2/patches/patch-aa: no checksum found
**************************************

best regards.
-- 
 Kouichirou Hiratsuka
   hira@po6.nsk.ne.jp