Subject: CVS commit: pkgsrc/graphics/png
From: Thomas Klausner
Date: 2008-04-15 15:26:14
Message id: 20080415132614.52A94175D0@cvs.netbsd.org

Log Message:
Update to 1.2.27beta3, fixing a possible application security problem.
See http://libpng.sourceforge.net/Advisory-1.2.26.txt for details.

Changes since 1.2.26:
version 1.2.27beta01 [April 12, 2008]
  Fixed bug (introduced in libpng-1.0.5h) with handling zero-length
    unknown chunks.
  Added more information about png_set_keep_unknown_chunks() to the
    documetation.
  Reject tRNS chunk with out-of-range samples instead of masking off
    the invalid high bits as done in since libpng-1.2.19beta5.

version 1.2.27beta02 [April 13, 2008]
  Revised documentation about unknown chunk and user chunk handling.
  Keep tRNS chunk with out-of-range samples and issue a png_warning().

version 1.2.27beta03 [April 14, 2008]
  Added check for NULL ptr in TURBOC version of png_free_default().
  Removed several unnecessary checks for NULL before calling png_free().
  Revised png_set_tRNS() so that calling it twice removes and invalidates
    the previous call.
  Revised pngtest to check for out-of-range tRNS samples.

Files:
RevisionActionfile
1.103modifypkgsrc/graphics/png/Makefile
1.47modifypkgsrc/graphics/png/distinfo