this patch updates libpng to 1.6.35, the new version changelog is the
following:
Changes since the last public release (1.6.34):
Restored 21 of the contrib/pngsuite/i*.png, which do not cause test
failures. Placed the remainder in contrib/pngsuite/interlaced/i*.png.
Added calls to png_set
Hi All,
update png to 1.6.32. This release includes a security patch:
"libpng version 1.6.31 added png_handle_eXIf(), which has a
null-pointer-dereference bug as well as a potential memory leak. Insofar
as the function has existed for only four weeks and the chunk itself for
only six, it's unlike
Simple update to the last stable version:
Index: Makefile
===
RCS file: /cvs/ports/graphics/png/Makefile,v
retrieving revision 1.120
diff -u -p -u -p -r1.120 Makefile
--- Makefile15 Oct 2017 21:40:30 - 1.120
+++ Makefile
On 2018/08/11 00:43, Solene Rapenne wrote:
> this patch updates libpng to 1.6.35, the new version changelog is the
> following:
>
> Changes since the last public release (1.6.34):
>
> Restored 21 of the contrib/pngsuite/i*.png, which do not cause test
> failures. Placed the remainder in con
On Sat, Aug 11, 2018 at 02:58:44PM +0100, Stuart Henderson wrote:
> On 2018/08/11 00:43, Solene Rapenne wrote:
> > this patch updates libpng to 1.6.35, the new version changelog is the
> > following:
> >
> > Changes since the last public release (1.6.34):
> >
> > Restored 21 of the contrib/pngs
On 2018/08/11 17:50, Theo Buehler wrote:
> On Sat, Aug 11, 2018 at 02:58:44PM +0100, Stuart Henderson wrote:
> > On 2018/08/11 00:43, Solene Rapenne wrote:
> > > this patch updates libpng to 1.6.35, the new version changelog is the
> > > following:
> > >
> > > Changes since the last public release
Solene Rapenne:
> this patch updates libpng to 1.6.35, the new version changelog is the
> following:
OK
I went over the diff .34 -> .35 and I don't see any ABI changes.
--
Christian "naddy" Weisgerber na...@mips.inka.de
Theo Buehler:
> There's one build warning:
>
> /usr/ports/pobj/png-1.6.35/libpng-1.6.35/contrib/libtests/pngvalid.c:11661:4:
> warning: implicit declaration of function 'feenableexcept' is invalid in C99
> [-Wimplicit-function-declaration]
> feenableexcept(FE_DIVBYZERO | FE_INVALID | FE
On Sun, Aug 12, 2018 at 05:03:03PM +0200, Christian Weisgerber wrote:
> If I wanted to patch this, I'd add the _BSD_SOURCE line without
> replacing the _GNU_SOURCE one.
Upstreamed as follows:
Index: patches/patch-contrib_libtests_pngvalid_c
Rafael Sadowski:
> update png to 1.6.32. This release includes a security patch:
>
> Ok? Comments?
ok naddy@
This should also be committed to 6.2-stable.
The latest upstream version is in fact 1.6.34, but that isn't
security relevant, so we can look at it later.
--
Christian "naddy" Weisgerbe
There's been a new release since I started working on the png update.
I don't want to put this in blindly without a test build and it will
take a few days for me to get around to that.
Meanwhile robert@ is complaining about display problems in chrome,
but his system is frankensteined, so who knows
This is a straightforward update to libpng 1.5.9 which already
includes the security fixes we had to shoehorn into the port.
I bumped the library because png_struct changed. It's supposed to
be opaque and we probably don't really need the bump, but...
I don't expect any fallout from this update.
Track upstream libpng. We elegantly skip the security holes that
were present in .30 and .31. Library bumped because png_struct has
been extended. (It is supposed to be an opaque type, but you can't
enforce this.)
Index: Makefile
=
Basically a maintenance update to libpng 1.2.16. Changes:
* One fix regarding some grayscale stuff.
* Present the same API when built with and without MMX optimization.
* (Port:) Don't bother installing README, nothing useful there.
Index: Makefile
===
SECURITY update to 1.2.44.
Fixes CVE-2010-1205.
I think this needs a major bump because irowbytes in png_struct_def
has been replaced with user_chunk_cache_max, which has a completely
different meaning.
Regress tests did pass on amd64. No other tests yet (I'm currently
rebuilding stuff depending
And while we're here, also update the old version of png included with
graphics/povray. (CVE-2011-3026)
Index: Makefile
===
RCS file: /cvs/ports/graphics/povray/Makefile,v
retrieving revision 1.21
diff -u -p -r1.21 Makefile
--- Makefi
works fine here on i386 and amd64
El 02/25/12 15:55, Christian Weisgerber escribió:
Index: Makefile
===
RCS file: /cvs/ports/graphics/png/Makefile,v
retrieving revision 1.84
diff -u -p -r1.84 Makefile
--- Makefile17 Feb 2012 15:
Christian Weisgerber <[EMAIL PROTECTED]> wrote:
> Basically a maintenance update to libpng 1.2.16. Changes:
> * One fix regarding some grayscale stuff.
> * Present the same API when built with and without MMX optimization.
> * (Port:) Don't bother installing README, nothing useful there.
And now
Here's the trivial graphics/png update to 1.6.36, no ABI changes,
along with a patch to set the soname to libpng.X.Y rather than
libpng16.X.Y. Unfortunately the whole libpng build framework is
commited to the latter.
Hmm, does the soname change require a major bump?
Index: Makefile
=
* Security update of graphics/png to 1.6.37:
CVE-2019-7317: use-after-free in png_image_free()
* Switch library soname from libpng16.so to libpng.so by changing
the primary name in the build. Bump major version.
Regression tests pass on amd64 and aarch64.
OK?
Index: Makefile
==
Kurt Mosiejczuk:
> Small point release. CHANGELOG does not indicate any API changes in the
> library so I didn't bump the shared library versions.
You can't really trust that. Especially for a port...
> Consumers seem to be... everything.
... like this. To verify:
* Use /usr/src/lib/check_s
On 2019-03-30, Christian Weisgerber wrote:
> Here's the trivial graphics/png update to 1.6.36, no ABI changes,
> along with a patch to set the soname to libpng.X.Y rather than
> libpng16.X.Y.
I'm postponing this until after the 6.5 release.
--
Christian "naddy" Weisgerber
Here's an update for graphics/png to 1.5.2. This only covers png
itself, not any fallout in the tree.
* I've added the depend step, because I don't think we're otherwise
guaranteed that pnglibconf.h is built first in a parallel build.
* We can drop libpng-manual.txt, it's included as libpng.3.
png 1.6.5 doesn't build on ARM. png 1.6.6 only includes the fixes for
ARM. No extra changes.
Please commit.
Index: Makefile
===
RCS file: /cvs/ports/graphics/png/Makefile,v
retrieving revision 1.95
diff -u -p -r1.95 Makefile
--- Mak
On 05/10/13 11:59 AM, Juan Francisco Cantero Hurtado wrote:
png 1.6.5 doesn't build on ARM. png 1.6.6 only includes the fixes for
ARM. No extra changes.
Please commit.
I was considering this update just to keep us in sync with the latest
rev but I decided not to. The one small fix has no relev
On Sat, Oct 05, 2013 at 02:22:11PM -0400, Brad Smith wrote:
> On 05/10/13 11:59 AM, Juan Francisco Cantero Hurtado wrote:
> >png 1.6.5 doesn't build on ARM. png 1.6.6 only includes the fixes for
> >ARM. No extra changes.
> >
> >Please commit.
>
> I was considering this update just to keep us in sy
26 matches
Mail list logo
