Update to version 10.28

- security fix for SA16184, patch from Debian

Changes:
- ppmtompeg: fix insecure temp file creation
- jpeg2000: don't do unsafe temporary files
- add cameratopam (Dave Coffin's dcraw)
- various other bugfixes

1 files changed, 20 insertions, 0 deletions

diff --git a/graphics/netpbm/patches/patch-ag b/graphics/netpbm/patches/patch-ag
new file mode 100644
index 00000000000..a86c8e8bb7d
--- /dev/null
+++ b/graphics/netpbm/patches/patch-ag
@@ -0,0 +1,20 @@
+$NetBSD: patch-ag,v 1.8 2005/08/06 14:07:07 salo Exp $
+
+Security fix for SA16184.  Patch from Debian.
+
+--- converter/other/pstopnm.c.orig	2004-06-23 04:22:33.000000000 +0200
++++ converter/other/pstopnm.c	2005-08-06 15:57:23.000000000 +0200
+@@ -704,11 +704,11 @@
+         pm_message("execing '%s' with args '%s' (arg 0), "
+                    "'%s', '%s', '%s', '%s', '%s', '%s', '%s'",
+                    ghostscriptProg, arg0,
+-                   deviceopt, outfileopt, gopt, ropt, "-q", "-dNOPAUSE", "-");
++                   deviceopt, outfileopt, gopt, ropt, "-q", "-dNOPAUSE", "-dSAFER", "-");
+     }
+ 
+     execl(ghostscriptProg, arg0, deviceopt, outfileopt, gopt, ropt, "-q",
+-          "-dNOPAUSE", "-", NULL);
++          "-dNOPAUSE", "-dSAFER", "-", NULL);
+     
+     pm_error("execl() of Ghostscript ('%s') failed, errno=%d (%s)",
+              ghostscriptProg, errno, strerror(errno));