CVS commit: pkgsrc/graphics/libsixel

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun May 10 12:06:55 UTC 2026

Modified Files:
        pkgsrc/graphics/libsixel: Makefile distinfo

Log Message:
libsixel: update to 1.8.7r2.

We are releasing a minor update in response to security advisories. Thank you to everyone who reported the issues.

📢 What's New in libsixel-1.9.7-r2

    Additional fix for #222, packed byte-size validation in
    sixel_encoder_encode_bytes() and Python bindings.
    Thanks to @xyzzy42

    tests: add C and Python regression coverage for #222 packed
    encode_bytes() paths.

    Security fix for GHSA-hx93-w8p2-ffh5, integer overflow in high-color
    encoder allocation that can lead to out-of-bounds memory access.
    Based on a patch provided by @curious-rabbit.

    Security fix for GHSA-9jm7-77gr-qghv, integer overflow in SIXEL parser
    repeat/count handling that can lead to out-of-bounds write.
    Based on a patch provided by @curious-rabbit.

    Security fix for GHSA-wpx3-h5g8-qr3w, NULL pointer dereference when
    palette allocation fails during SIXEL decode.
    Based on a patch provided by @curious-rabbit.


To generate a diff of this commit:
cvs rdiff -u -r1.83 -r1.84 pkgsrc/graphics/libsixel/Makefile
cvs rdiff -u -r1.29 -r1.30 pkgsrc/graphics/libsixel/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/graphics/libsixel/Makefile
diff -u pkgsrc/graphics/libsixel/Makefile:1.83 pkgsrc/graphics/libsixel/Makefile:1.84
--- pkgsrc/graphics/libsixel/Makefile:1.83      Sun Apr 19 14:56:11 2026
+++ pkgsrc/graphics/libsixel/Makefile   Sun May 10 12:06:55 2026
@@ -1,12 +1,12 @@
-# $NetBSD: Makefile,v 1.83 2026/04/19 14:56:11 wiz Exp $
+# $NetBSD: Makefile,v 1.84 2026/05/10 12:06:55 wiz Exp $
 
-DISTNAME=              libsixel-1.8.7-r1
+DISTNAME=              libsixel-1.8.7-r2
 PKGNAME=               ${DISTNAME:S/-r/r/}
 CATEGORIES=            graphics
 MASTER_SITES=          ${MASTER_SITE_GITHUB:=saitoha/}
 GITHUB_PROJECT=                libsixel
 #GITHUB_TAG=           v${PKGVERSION_NOREV}
-GITHUB_TAG=            v1.8.7-r1
+GITHUB_TAG=            v1.8.7-r2
 
 MAINTAINER=            tsutsui%NetBSD.org@localhost
 HOMEPAGE=              https://saitoha.github.io/libsixel/

Index: pkgsrc/graphics/libsixel/distinfo
diff -u pkgsrc/graphics/libsixel/distinfo:1.29 pkgsrc/graphics/libsixel/distinfo:1.30
--- pkgsrc/graphics/libsixel/distinfo:1.29      Sun Apr 19 14:56:11 2026
+++ pkgsrc/graphics/libsixel/distinfo   Sun May 10 12:06:55 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.29 2026/04/19 14:56:11 wiz Exp $
+$NetBSD: distinfo,v 1.30 2026/05/10 12:06:55 wiz Exp $
 
-BLAKE2s (libsixel-1.8.7-r1.tar.gz) = 36a53e64d34ee4c1a0ef7367a3aa393e09c9d7e70a1475b2f15861e1e18a12f8
-SHA512 (libsixel-1.8.7-r1.tar.gz) = 6e12f405b96f896d9f5bde8b1ae4feb4c051d8576b68c34bbf294c5eacfd2b1b8b54e44580a98417c3b318467ded3b44534ddbab319d0f9317bbabf3fdb0c51a
-Size (libsixel-1.8.7-r1.tar.gz) = 4901699 bytes
+BLAKE2s (libsixel-1.8.7-r2.tar.gz) = 5fbf49a5feca73b7f30ddc0267335b582aeebc8bcea94f40bc80fbb99ffb7e9e
+SHA512 (libsixel-1.8.7-r2.tar.gz) = 4f9d779732385af9cc81e7d9d823e6999a3cf653e6ce5e7eb19e7a7319736f960a31c9cd502e63c85f78907ab5375b0a310bb2deecd95b6f35769cff998a31b5
+Size (libsixel-1.8.7-r2.tar.gz) = 4909793 bytes