Age | Commit message (Collapse) | Author | Files | Lines |
|
othersrc/bootstrap-pkgsrc/pkg_install into ${FILESDIR}.
Using autoconf greatly simplifies maintenance of this package across
multiple platforms. Placing the extracted source under ${FILESDIR}
will eventually let us use the same source for bootstrapping as
well, though we're not ready for this yet.
|
|
commit log in graphics/png for details).
|
|
images (and bump package to 1.2.5nb2). The following is taken directly
from the png-implement mailing list...
Date: Fri, 20 Dec 2002 11:26:31 -0500
From: Glenn Randers-Pehrson <glennrp@comcast.net>
Reply-To: png-implement@ccrc.wustl.edu
To: png-implement@ccrc.wustl.edu
Subject: Re: [png-implement] bug in png_read_filler() with 16-bit samples
At 01:01 AM 12/5/02 -0500, Glenn Randers-Pehrson wrote:
>A bug has turned up in png_read_filler() with 16-bit samples.
>The starting offsets for the loops are calculated incorrectly
>which causes a buffer overrun beyond the beginning of the row
>buffer.
>
>To fix, at lines 1968 and 1990,
>change "row_width * 3" to "row_width * 6"
>and at lines 1969 and 1991,
>change "row_width;" to "row_width * 2;"
This is only half of the story. Adding an alpha channel to
16-bit *grayscale* images with png_do_read_filler() exhibits
the same bug, and pngcrush crashes if I try to do it.
To fix, at lines 1892, 1893, 1910, and 1911 of pngrtran.c
change "row_width" to "row_width * 2"
Note that applications that do not add an alpha channel via
png_set_filler(), and any applications that do, but reduce 16-bit
samples to 8 bit via png_set_strip_16() are invulnerable to
the bug. Pngcrush is the only application that I know of
that uses png_set_filler() without also using png_set_strip_16().
Glenn
--
Send the message body "help" to png-implement-request@ccrc.wustl.edu
|
|
|
|
|
|
+sylpheed-0.8.7, texmacs-1.0.1, wine-20021219.
|
|
sweep package).
|
|
|
|
|
|
fakeroot creates a faked root environment for building tar (or other) packages with proper file ownerships and permissions as normal user
|
|
gettext.
|
|
- SECURITY FIX: The scheduler now provides a FileDevice directive to
control whether new printers can be added using device URIs of the form
"file:/filename". The default is to not allow printers with these
device URIs.
- SECURITY FIX: Potential underflow/overflow bug in web interface.
- SECURITY FIX: Race condition in certificate creation.
- SECURITY FIX: Bad URIs in browse packets could be used to exploit the
web interface underflow/overflow bug.
- SECURITY FIX: Some types of Denial of Service attacks were not handled
properly, so once the attack was over the scheduler did not close the
connections immediately on all platforms.
- SECURITY FIXES: Added integer overflow/underflow checks for all image
formats.
- Bug fixes to the scheduler.
- Upgraded pdftops filter to Xpdf 2.01 with fixes for TrueType fonts.
- Added a MaxClientsPerHost configuration directive to provide limited
protection against Denial of Service attacks.
|
|
|
|
- Bug fixes to the backends and scheduler.
- Bug fixes to the image filters.
- The scheduler now allows accounts authenticated via PAM to not have a
corresponding UNIX account, but group membership still requires the
account name to be listed in the UNIX group file(s)...
- Added some startup performance enhancements to the scheduler so that the
printer object information is regenerated fewer times and the MIME type
database is not filled with lots of empty filters for raw/direct queues.
- The backends now ignore SIGPIPE so that failed job filters will not stop
a print queue.
- User-defined classification strings are now printed verbatim.
- The lpstat command did not allow for destination lists.
- The LPD backend now sends the job title as the print filename.
- Added support for variable sizes in the EPSON dot matrix printer drivers.
This allows for pages as short as 1/2" (1 row of labels) and does not do
an automatic form feed.
- The Solaris USB backend now supports the new device URI syntax.
- The serial backend now enumerates serial ports under MacOS X.
|
|
|
|
reported to the png-implement mailing list by Glenn Randers-Pehrson:
ftp://swrinde.nde.swri.edu/pub/png-group/archives/png-implement.200212
[Glenn Randers-Pehrson is the original author and chief maintainer of
libpng.]
From the discussion in the archive, it appears to be unlikely that the
bug could be exploited by a malicious web-server, chiefly because the
operation that triggers it is more likely to be carried out by an image
manipulation program (i.e. pngcrush), than by a web browser.
|
|
|
|
* Fixed SA->DA registration logic that excluded some mortal registrations.
* Fixed aging problem that aged out static registrations.
* Fixed SLPDeReg().
* Fixed a segfault generated by a freed but unlinked SLPDSocket.
* Made net.slp.multicastIF actually work.
|
|
|
|
|
|
Waimea mini pager is a simple virtual desktop pager dockapp for the Waimea
Window Manager. Although it supports simple desktop navigation, its main
purpose is to give the user a feel for where the virtual desktop viewport is
currently positioned.
Approved by wiz.
|
|
|
|
|
|
Based on pr pkg/19438 by Adrian Portelli.
Changes since 1.2.6:
. changes by Renaud Deraison (deraison@cvs.nessus.org)
- The 'cancel' button of several file selection dialogs is now working
- Optimized several plugins :
- Web-related checks now use http_recv() instead of recv()
- open_priv_sock_tcp() has a lower timeout
- RPC related checks now use get_rpc_port(), a function equivalent
to libc's getrpcport() but with a much smaller timeout
- Decreased the default value of checks_read_timeout from 15 to 5
- Fixed a bug in the plugin selection GUI which would not refresh
the list of plugins of a given family properly (bug#3)
- Fixed memory leaks in NASL
- Fixed a bug in nessusd which would make it leak memory when receiving a SIGHUP
(bug#10)
- Fixed a compatibility problem with Nmap 3.10ALPHA (bug#11)
- Nessus now accepts nmap's U: and T: notation for the port range (bug#5)
. changes by Erik Anderson (eanders@pobox.com)
- Added CVE and BID links, added urls and removed dead links from the plugins
. changes by Michel Scheidell (scheidell@secnap.net)
- Improved several SMB-related checks
. changes by Rodolfo Baader (rbaader@activesec.biz)
- Quotes and apostrophes are properly escaped in the XML output report
|
|
|
|
|
|
a different filesystem than the system headers. Fix from PR 19452 by
Arto Huusko <arto.huusko@utu.fi>.
|
|
* NVidia nForce2 audio support
* Sound Blaster LiveDrive support for Audigy and SBLive!
* Multichannel audio device for VIA8233
* Updates for VIA97/Intel810
* ALC650 AC'97 - extended volume controls added
|
|
|
|
- Added ability to tune LOCALBASE and PKG_SYSCONFBASE.
- Deprecated PTHREAD_TYPE variable, not useful any more.
- Multiple error checking (directory presence) added.
- Several bugfixes (specially in removepkgs target).
- Replaced "echo -n" with "printf" (more portable).
- Replaced "! -z" with "-n" when doing tests.
- Changed my email address to the NetBSD one.
|
|
GImageView is a GTK+ based image viewer.
It supports tabbed browsing, thumbnail table views, directory tree views,
drag and drop, reading thumbnail cache of other famous image viewers,
and has a flexible user interface.
Submitted in PR pkg/19455 by Juan RP.
|
|
|
|
- Add libmm support as per apache pkg.
Bump PKGREVISION.
|
|
Fixes build problem on Solaris.
|
|
|
|
Changes since 2.5 unknown, see HOMEPAGE.
Update provided by Juan RP in PR pkg/19454.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
- When running install-kernel, unset DESTDIR variable so kernel is placed
in the right location.
|
|
|
|
|
|
LIBTOOL_OVERRIDE.
|
|
GNU Paint is a simple, easy-to-use paint program for GNOME,
the GNU Desktop. Gpaint is part of the GNU Project. Written by
Andy Tai, Gpaint is licensed under the GNU GPL, version 2 or later.
Curent Features:
* Drawing tools--ovals, freehand, polygon, text, with fill or shallow
for polygons and closed freehand.
* Cut and paste by selecting irregular regions or polygons.
* Print support using gnome-print (still flaky, will be improved upon
next release).
* Modern, ease-to-use user interface with tool and color palettes.
* Editing multiple image at the same time without runnng multiple
instance of the image editor.
* All image processing features present in xpaint.
Submitted in PR pkg/19453 by Juan RP.
|
|
|
|
GNU Paint is a simple, easy-to-use paint program for GNOME,
the GNU Desktop. Gpaint is part of the GNU Project. Written by
Andy Tai, Gpaint is licensed under the GNU GPL, version 2 or later.
Curent Features:
* Drawing tools--ovals, freehand, polygon, text, with fill or shallow
for polygons and closed freehand.
* Cut and paste by selecting irregular regions or polygons.
* Print support using gnome-print (still flaky, will be improved upon
next release).
* Modern, ease-to-use user interface with tool and color palettes.
* Editing multiple image at the same time without runnng multiple
instance of the image editor.
* All image processing features present in xpaint.
Submitted in PR pkg/19453 by Juan RP.
|
|
Xaric is a UNIX irc client similer to BitchX or ircII. I would impress you
with a list of features, but since it has no impressive features (and lacks
a few important ones) that probably is not a good idea. The whole reason for
Xaric was to remove all of the bogus, broken crap and silly features from
BitchX and have a nice colorful client.
Submitted in PR pkg/19451 by Juan RP.
|