CVS commit: pkgsrc/graphics/libansilove

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Nov  2 06:45:54 UTC 2026

Modified Files:
        pkgsrc/graphics/libansilove: Makefile distinfo

Log Message:
libansilove: updated to 1.4.4

libansilove 1.4.4 (2026-11-02)

- Check if high_font_data_xbin is set rather than trusting the xbin_flags
  data (CVE-2026-111144, found by HaiND and reported by Alexander Shvedov)
- Fix source files used by format fuzzers
- Refactor the XBIN loader to use a common error label and fix canvas
  memory leaks
- Fix out-of-bounds reads in RLE decoder (CVE-2026-111143, found by HaiND)


To generate a diff of this commit:
cvs rdiff -u -r1.38 -r1.39 pkgsrc/graphics/libansilove/Makefile
cvs rdiff -u -r1.25 -r1.26 pkgsrc/graphics/libansilove/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/graphics/libansilove/Makefile
diff -u pkgsrc/graphics/libansilove/Makefile:1.38 pkgsrc/graphics/libansilove/Makefile:1.39
--- pkgsrc/graphics/libansilove/Makefile:1.38   Fri Oct 23 08:11:34 2026
+++ pkgsrc/graphics/libansilove/Makefile        Mon Nov  2 06:45:54 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.38 2026/10/23 08:11:34 adam Exp $
+# $NetBSD: Makefile,v 1.39 2026/11/02 06:45:54 adam Exp $
 
-DISTNAME=      libansilove-1.4.3
+DISTNAME=      libansilove-1.4.4
 CATEGORIES=    graphics
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=ansilove/}
 GITHUB_RELEASE=        ${PKGVERSION_NOREV}

Index: pkgsrc/graphics/libansilove/distinfo
diff -u pkgsrc/graphics/libansilove/distinfo:1.25 pkgsrc/graphics/libansilove/distinfo:1.26
--- pkgsrc/graphics/libansilove/distinfo:1.25   Fri Oct 23 08:11:34 2026
+++ pkgsrc/graphics/libansilove/distinfo        Mon Nov  2 06:45:54 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.25 2026/10/23 08:11:34 adam Exp $
+$NetBSD: distinfo,v 1.26 2026/11/02 06:45:54 adam Exp $
 
-BLAKE2s (libansilove-1.4.3.tar.gz) = 7be5965e64e98b330323132dabe97a6aeb2b508a46687ab0873ab676db34429e
-SHA512 (libansilove-1.4.3.tar.gz) = 98fdd0cf9fb14475bf071dbae363ad772a66d5b8da60f833f4a6dafc1896ede15ec28f4891bc25568b557dcda4ead3f53ae0726e7851b26885342108f5185b8c
-Size (libansilove-1.4.3.tar.gz) = 63425 bytes
+BLAKE2s (libansilove-1.4.4.tar.gz) = 00d9d20055fabfa9a92162857b9f5aefdb6a4297956208fe756a365eaa389d89
+SHA512 (libansilove-1.4.4.tar.gz) = 12e28f676fd950691f17a5e0379734e33e875d874cba9b6ea1c22403c5e3e5e68b47e01856b7b5ec354a5f32741d1a0ad1430fa1c03fa8a86bae64377d05e0af
+Size (libansilove-1.4.4.tar.gz) = 63619 bytes