Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/graphics/p5-GD p5-GD: update to 2.72.



details:   https://anonhg.NetBSD.org/pkgsrc/rev/af2926d298dd
branches:  trunk
changeset: 438406:af2926d298dd
user:      wiz <wiz%pkgsrc.org@localhost>
date:      Mon Sep 07 11:21:28 2020 +0000

description:
p5-GD: update to 2.72.

2.72    * fix CVE 2019-6977 colorMatch for older unpatched libgd versions.
          This is a severe security problem, an exploitable heap-overflow.
          See https://nvd.nist.gov/vuln/detail/CVE-2019-6977

diffstat:

 graphics/p5-GD/Makefile |   7 ++-----
 graphics/p5-GD/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 10 deletions(-)

diffs (38 lines):

diff -r 3d75a42750c6 -r af2926d298dd graphics/p5-GD/Makefile
--- a/graphics/p5-GD/Makefile   Mon Sep 07 11:20:55 2020 +0000
+++ b/graphics/p5-GD/Makefile   Mon Sep 07 11:21:28 2020 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.88 2020/08/31 18:09:41 wiz Exp $
+# $NetBSD: Makefile,v 1.89 2020/09/07 11:21:28 wiz Exp $
 
-DISTNAME=      GD-2.71
+DISTNAME=      GD-2.72
 PKGNAME=       p5-${DISTNAME}
-PKGREVISION=   3
 CATEGORIES=    graphics perl5
 MASTER_SITES=  ${MASTER_SITE_PERL_CPAN:=GD/}
 
@@ -13,8 +12,6 @@
 
 BUILD_DEPENDS+=        p5-ExtUtils-PkgConfig>=1:../../devel/p5-ExtUtils-PkgConfig
 
-USE_LANGUAGES=         c
-
 # This is required at least on some Solaris builds to get a runnable
 # package, and should be harmless on other platforms. See PR 45873.
 CFLAGS+=               -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
diff -r 3d75a42750c6 -r af2926d298dd graphics/p5-GD/distinfo
--- a/graphics/p5-GD/distinfo   Mon Sep 07 11:20:55 2020 +0000
+++ b/graphics/p5-GD/distinfo   Mon Sep 07 11:21:28 2020 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.28 2019/02/24 00:52:58 mef Exp $
+$NetBSD: distinfo,v 1.29 2020/09/07 11:21:28 wiz Exp $
 
-SHA1 (GD-2.71.tar.gz) = b1bbc5c55bdc80553fabf17b01a90e6be0f4886c
-RMD160 (GD-2.71.tar.gz) = 8cf166852315841ffbdf44afea5fb7e8c415457c
-SHA512 (GD-2.71.tar.gz) = 3a1555f07e6ab36a7218f24853f4168914be45e8c19ab0fe971ab044725dc0d7efeca75be2e4408406e69601f07e047fd3ea157acc9b9d339c9917a1c3e1f74d
-Size (GD-2.71.tar.gz) = 256845 bytes
+SHA1 (GD-2.72.tar.gz) = d3dbf21ea369a8e78a9d164ed198246c160557f3
+RMD160 (GD-2.72.tar.gz) = 2bfdbb28b46d41a315e8c776c2357c39f96619ba
+SHA512 (GD-2.72.tar.gz) = 93a42c2385673ce8133102adc125da966f8a8abcebe4a0a9d87ae3e77a84870138db81f532e393eb1c5be4b12c71b737bd5b85ed84cf4b8580f08a5296189103
+Size (GD-2.72.tar.gz) = 259938 bytes



Home | Main Index | Thread Index | Old Index