summaryrefslogtreecommitdiff
path: root/graphics/gd
AgeCommit message (Collapse)AuthorFilesLines
2019-11-02graphics: align variable assignmentsrillig1-3/+3
pkglint -Wall -F --only aligned --only indent -r No manual corrections.
2019-08-11Bump PKGREVISIONs for perl 5.30.0wiz1-2/+2
2018-09-10Add upstream patch to address CVE-2018-1000222.kim4-9/+26
Restore the tiff option, so libtiff can be avoided. Ok by adam@.
2018-08-22Recursive bump for perl5-5.28.0wiz1-2/+2
2018-05-05Use pkg-config. Fixes freetype2 detection and "annotate" build on Darwin.schmonz1-2/+2
2018-03-12Recursive bumps for fontconfig and libzip dependency changes.wiz2-4/+4
2018-02-25graphics/gd: fix undefined behavior in ctype functionsrillig3-3/+23
2017-09-04Changes 2.2.5:adam5-36/+16
Security * Double-free in gdImagePngPtr(). (CVE-2017-6362) * Buffer over-read into uninitialized memory. (CVE-2017-7890) Fixed * Fix 109: XBM reading fails with printed error * Fix 338: Fatal and normal libjpeg/ibpng errors not distinguishable * Fix 357: 2.2.4: Segfault in test suite * Fix 386: gdImageGrayScale() may produce colors * Fix 406: webpng -i removes the transparent color * Fix Coverity 155475: Failure to restore alphaBlendingFlag * Fix Coverity 155476: potential resource leak * Fix several build issues and test failures * Fix and reenable optimized support for reading 1 bps TIFFs Added * The native MSVC buildchain now supports libtiff and most executables
2017-04-15Make tiff option when building gd, as tiff has many long-standingkim3-9/+17
vulnerabilities. Still enabled by default, as before. Ok by wiz@. Fixes PR pkg/52148 and adds tiff to PKG_SUGGESTED_OPTIONS.
2017-02-28Recursive revbump from graphics/libwebpryoon2-3/+4
2017-02-09Make gd build on Darwinminskim2-1/+14
Include limits.h to use INT_MAX.
2017-02-04update of gd to 2.2.4.spz3-30/+8
Upstream Changelog: Security gdImageCreate() doesn't check for oversized images and as such is prone to DoS vulnerabilities. (CVE-2016-9317) double-free in gdImageWebPtr() (CVE-2016-6912) potential unsigned underflow in gd_interpolation.c DOS vulnerability in gdImageCreateFromGd2Ctx() Fixed Fix #354: Signed Integer Overflow gd_io.c Fix #340: System frozen Fix OOB reads of the TGA decompression buffer Fix DOS vulnerability in gdImageCreateFromGd2Ctx() Fix potential unsigned underflow Fix double-free in gdImageWebPtr() Fix invalid read in gdImageCreateFromTiffPtr() Fix OOB reads of the TGA decompression buffer Fix #68: gif: buffer underflow reported by AddressSanitizer Avoid potentially dangerous signed to unsigned conversion Fix #304: test suite failure in gif/bug00006 [2.2.3] Fix #329: GD_BILINEAR_FIXED gdImageScale() can cause black border Fix #330: Integer overflow in gdImageScaleBilinearPalette() Fix 321: Null pointer dereferences in gdImageRotateInterpolated Fix whitespace and add missing comment block Fix #319: gdImageRotateInterpolated can have wrong background color Fix color quantization documentation Fix #309: gdImageGd2() writes wrong chunk sizes on boundaries Fix #307: GD_QUANT_NEUQUANT fails to unset trueColor flag Fix #300: gdImageClone() assigns res_y = res_x Fix #299: Regression regarding gdImageRectangle() with gdImageSetThickness() Replace GNU old-style field designators with C89 compatible initializers Fix #297: gdImageCrop() converts palette image to truecolor image Fix #290: TGA RLE decoding is broken Fix unnecessary non NULL checks Fix #289: Passing unrecognized formats to gdImageGd2 results in corrupted files Fix #280: gdImageWebpEx() quantization parameter is a misnomer Publish all gdImageCreateFromWebp*() functions and gdImageWebpCtx() Fix issue #276: Sometimes pixels are missing when storing images as BMPs Fix issue #275: gdImageBmpCtx() may segfault for non-seekable contexts Fix copy&paste error in gdImageScaleBicubicFixed() Added More documentation Documentation on GD and GD2 formats More tests
2016-10-05Add fix for CVE-2016-7568.taca3-2/+25
Bump PKGREVISION.
2016-08-03Fix unresolvable dependency.wiz1-2/+2
2016-08-03Revbump after graphics/gd updateadam1-2/+2
2016-08-02We welcome the 2.2.3 release around a month after 2.2.2 (we are getting ↵adam11-434/+18
consistent). Another important milestone in the GD 2.2 series. Security related fixes: This flaw is caused by loading data from external sources (file, custom ctx, etc) and are hard to validate before calling libgd APIs: * fix php bug 72339, Integer Overflow in _gd2GetHeader (CVE-2016-5766) * bug 247, A read out-of-bands was found in the parsing of TGA files (CVE-2016-6132) * also bug 247, Buffer over-read issue when parsing crafted TGA file (CVE-2016-6214) * bug 248, fix Out-Of-Bounds Read in read_image_tga Using application provided parameters, in these cases invalid data causes the issues: * Integer overflow error within _gdContributionsAlloc() (CVE-2016-6207) * fix php bug 72494, invalid color index not handled, can lead to crash ( CVE-2016-6128) * improve color check for CropThreshold Important update: * gdImageCopyResampled has been improved. Better handling of images with alpha channel, also brings libgd in sync with php's bundled gd.
2016-07-09Bump PKGREVISION for perl-5.24.0 for everything mentioning perl.wiz1-2/+2
2016-06-30Add fix for CVE-2016-6128 from upstream.taca3-3/+22
Bump PKGREVISION.
2015-11-18Recursive revbump from multimedia/libvpxryoon2-4/+4
2015-11-03Add SHA512 digests for distfiles for graphics categoryagc1-1/+2
Problems found with existing digests: Package fotoxx distfile fotoxx-14.03.1.tar.gz ac2033f87de2c23941261f7c50160cddf872c110 [recorded] 118e98a8cc0414676b3c4d37b8df407c28a1407c [calculated] Package ploticus-examples distfile ploticus-2.00/plnode200.tar.gz 34274a03d0c41fae5690633663e3d4114b9d7a6d [recorded] da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated] Problems found locating distfiles: Package AfterShotPro: missing distfile AfterShotPro-1.1.0.30/AfterShotPro_i386.deb Package pgraf: missing distfile pgraf-20010131.tar.gz Package qvplay: missing distfile qvplay-0.95.tar.gz Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
2015-09-25update gdlib-config version inforichard4-2/+41
bump PKGREVISION
2015-07-04Remove USE_X11BASE and X11PREFIX.joerg1-2/+2
2015-06-30Update to 2.1.1ryoon4-54/+40
Changelog: GD team proudly announces that the 2.1.1 version of GD Graphics Library has been released. We have fixed some reported bugs and improved the build scripts (cmake and configure). See the Changelog files for a full list with details or CVEs. This is a recommended update.
2015-06-30Recursive revbump from pkgsrc/multimedia/libvpx (buildink3.mk).ryoon1-2/+2
2015-06-30Recursive revbump from pkgsrc/multimedia/libvpx.ryoon1-2/+2
2015-06-12Recursive PKGREVISION bump for all packages mentioning 'perl',wiz1-2/+2
having a PKGNAME of p5-*, or depending such a package, for perl-5.22.0.
2015-04-12Upstream patch for overflow in gif parser (CVE-2014-9709)tnn3-3/+49
2015-02-25Fix buidlinking when libvpx option is not turned onadam1-5/+5
2014-12-14fixes copy&paste error from imlib2/buildlink3.mk.obache1-3/+3
2014-12-14handle for the case using pre-libvpx optional version.obache1-2/+11
2014-12-09Make libvpx a default-on option instead of a hard dependency.wiz3-7/+14
Based on patch by Thomas Orgis on pkgsrc-users.
2014-10-09Remove pkgviews: don't set PKG_INSTALLATION_TYPES in Makefiles.wiz1-3/+1
2014-05-29Bump for perl-5.20.0.wiz1-1/+2
Do it for all packages that * mention perl, or * have a directory name starting with p5-*, or * depend on a package starting with p5- like last time, for 5.18, where this didn't lead to complaints. Let me know if you have any this time.
2013-11-11Add upstream report URL per PR 48334.dholland2-3/+6
2013-11-11Don't use ceill(); it isn't needed here and causes problems. See PR 48334.dholland2-1/+19
Technically this change should bump PKGREVISION (as it changes the binary package ever so slightly for platforms where the ceill() didn't cause a build failure) but I'm going to let it slide.
2013-09-04recursive bump from graphics/gd shlib major bump.obache1-2/+2
2013-09-04Include libiconv. Fixes build on SunOS.jperkin1-1/+2
2013-09-03set HTTP master site, and curl is not required.obache1-3/+2
2013-09-03Use "curl" to fetch the distfile because the master site enforces thetron1-1/+2
use of HTTPS.
2013-09-02Changes 2.1.0:adam9-99/+59
* gdColorMapLookup() answers the RGB values according to given color map * Added support of variable resolution * new filter gdImagePixelate() * merged improvements that PHP GD team had made to GD Graphics Library * bugfixes
2013-06-04Try to fix the fallout caused by the fix for PR pkg/47882. Part 3:tron2-4/+4
Recursively bump package revisions again after the "freetype2" and "fontconfig" handling was fixed.
2013-06-03Bump freetype2 and fontconfig dependencies to current pkgsrc versions,wiz2-4/+4
to address issues with NetBSD-6(and earlier)'s fontconfig not being new enough for pango. While doing that, also bump freetype2 dependency to current pkgsrc version. Suggested by tron in PR 47882
2013-05-31Bump all packages for perl-5.18, thatwiz1-2/+2
a) refer 'perl' in their Makefile, or b) have a directory name of p5-*, or c) have any dependency on any p5-* package Like last time, where this caused no complaints.
2013-02-16Recursive bump for png-1.6.wiz2-4/+4
2013-01-26Revbump after graphics/jpeg and textproc/icuadam2-4/+4
2012-10-06Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-3/+1
2012-10-03Bump all packages that use perl, or depend on a p5-* package, orwiz1-2/+2
are called p5-*. I hope that's all of them.
2011-11-01Recursive bump for graphics/freetype2 buildlink addition.sbd2-4/+4
2011-01-13png shlib name changed for png>=1.5.0, so bump PKGREVISIONs.wiz2-4/+4
2011-01-06add a patch from upstream to fix a bug which made that fontconfigdrochner3-6/+15
support could not be switched off once enabled (could make a difference for gnuplot but I couldn't find a testcase yet)
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-16 07:15:15 +0000