CVS commit: [pkgsrc-2014Q1] pkgsrc/graphics/jbigkit

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Fri Apr 11 11:50:10 UTC 2014

Modified Files:
        pkgsrc/graphics/jbigkit [pkgsrc-2014Q1]: Makefile distinfo
        pkgsrc/graphics/jbigkit/patches [pkgsrc-2014Q1]: patch-Makefile
            patch-aa patch-ab

Log Message:
Pullup ticket #4363 - requested by obache
graphics/jbigkit: security update

Revisions pulled up:
- graphics/jbigkit/Makefile                                     1.6
- graphics/jbigkit/distinfo                                     1.5
- graphics/jbigkit/patches/patch-Makefile                       1.2
- graphics/jbigkit/patches/patch-aa                             1.4
- graphics/jbigkit/patches/patch-ab                             1.5

---
   Module Name: pkgsrc
   Committed By:        obache
   Date:                Thu Apr 10 12:04:16 UTC 2014

   Modified Files:
        pkgsrc/graphics/jbigkit: Makefile distinfo
        pkgsrc/graphics/jbigkit/patches: patch-Makefile patch-aa patch-ab

   Log Message:
   Update jbigkit to 2.1.

   Changes in version 2.1 (2014-04-08)

   This is a security-critical bug-fix release that remains API and ABI
   backwards compatible to version 2.0. Users who process BIE data from
   untrusted sources should upgrade.

     - fixed a buffer-overflow vulnerability in the jbig.c decoder,
       reported by Florian Weimer (Red Hat): CVE-2013-6369

     - fixed ability of corrupted input data to force jbig85.c decoder
       into an end-less loop

     - fixed a bug in the processing of private deterministic-prediction
       tables (DPPRIV=3D1) in jbig.c decoder

     - fixed integer-type mismatches in printf arguments on 64-bit systems

     - fuzz-testing script added


To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.5.2.1 pkgsrc/graphics/jbigkit/Makefile
cvs rdiff -u -r1.4 -r1.4.2.1 pkgsrc/graphics/jbigkit/distinfo
cvs rdiff -u -r1.1 -r1.1.2.1 pkgsrc/graphics/jbigkit/patches/patch-Makefile
cvs rdiff -u -r1.3 -r1.3.2.1 pkgsrc/graphics/jbigkit/patches/patch-aa
cvs rdiff -u -r1.4 -r1.4.2.1 pkgsrc/graphics/jbigkit/patches/patch-ab

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.