CVS commit: [pkgsrc-2009Q2] pkgsrc/graphics/openexr

[Matthias Scheler <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Fri Aug 28 22:15:55 UTC 2009

Modified Files:
        pkgsrc/graphics/openexr [pkgsrc-2009Q2]: Makefile distinfo
Added Files:
        pkgsrc/graphics/openexr/patches [pkgsrc-2009Q2]: patch-ae patch-af
            patch-ag patch-ah patch-ai

Log Message:
Pullup ticket #2878 - requested by hasso
openexr: security patch

Revisions pulled up:
- graphics/openexr/Makefile                     1.22
- graphics/openexr/distinfo                     1.13 via patch
- graphics/openexr/patches/patch-ae             1.1
- graphics/openexr/patches/patch-af             1.1
- graphics/openexr/patches/patch-ag             1.1
- graphics/openexr/patches/patch-ah             1.1
- graphics/openexr/patches/patch-ai             1.1
---
Module Name:    pkgsrc
Committed By:   hasso
Date:           Fri Aug 28 21:33:08 UTC 2009

Modified Files:
        pkgsrc/graphics/openexr: Makefile distinfo
Added Files:
        pkgsrc/graphics/openexr/patches: patch-ae patch-af patch-ag
patch-ah
            patch-ai

Log Message:
Add patches for CVE-2009-1720 (multiple integer overflows in OpenEXR) and
CVE-2009-1721 (denial of service (application crash) or possibly execute
arbitrary code in the Imf::hufUncompress function). Bump PKGREVISION.


To generate a diff of this commit:
cvs rdiff -u -r1.21 -r1.21.4.1 pkgsrc/graphics/openexr/Makefile
cvs rdiff -u -r1.10 -r1.10.16.1 pkgsrc/graphics/openexr/distinfo
cvs rdiff -u -r0 -r1.1.2.2 pkgsrc/graphics/openexr/patches/patch-ae \
    pkgsrc/graphics/openexr/patches/patch-af \
    pkgsrc/graphics/openexr/patches/patch-ag \
    pkgsrc/graphics/openexr/patches/patch-ah \
    pkgsrc/graphics/openexr/patches/patch-ai

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.