summaryrefslogtreecommitdiff
path: root/graphics/gd
AgeCommit message (Collapse)AuthorFilesLines
2017-04-15Make tiff option when building gd, as tiff has many long-standingkim3-9/+17
vulnerabilities. Still enabled by default, as before. Ok by wiz@. Fixes PR pkg/52148 and adds tiff to PKG_SUGGESTED_OPTIONS.
2017-02-28Recursive revbump from graphics/libwebpryoon2-3/+4
2017-02-09Make gd build on Darwinminskim2-1/+14
Include limits.h to use INT_MAX.
2017-02-04update of gd to 2.2.4.spz3-30/+8
Upstream Changelog: Security gdImageCreate() doesn't check for oversized images and as such is prone to DoS vulnerabilities. (CVE-2016-9317) double-free in gdImageWebPtr() (CVE-2016-6912) potential unsigned underflow in gd_interpolation.c DOS vulnerability in gdImageCreateFromGd2Ctx() Fixed Fix #354: Signed Integer Overflow gd_io.c Fix #340: System frozen Fix OOB reads of the TGA decompression buffer Fix DOS vulnerability in gdImageCreateFromGd2Ctx() Fix potential unsigned underflow Fix double-free in gdImageWebPtr() Fix invalid read in gdImageCreateFromTiffPtr() Fix OOB reads of the TGA decompression buffer Fix #68: gif: buffer underflow reported by AddressSanitizer Avoid potentially dangerous signed to unsigned conversion Fix #304: test suite failure in gif/bug00006 [2.2.3] Fix #329: GD_BILINEAR_FIXED gdImageScale() can cause black border Fix #330: Integer overflow in gdImageScaleBilinearPalette() Fix 321: Null pointer dereferences in gdImageRotateInterpolated Fix whitespace and add missing comment block Fix #319: gdImageRotateInterpolated can have wrong background color Fix color quantization documentation Fix #309: gdImageGd2() writes wrong chunk sizes on boundaries Fix #307: GD_QUANT_NEUQUANT fails to unset trueColor flag Fix #300: gdImageClone() assigns res_y = res_x Fix #299: Regression regarding gdImageRectangle() with gdImageSetThickness() Replace GNU old-style field designators with C89 compatible initializers Fix #297: gdImageCrop() converts palette image to truecolor image Fix #290: TGA RLE decoding is broken Fix unnecessary non NULL checks Fix #289: Passing unrecognized formats to gdImageGd2 results in corrupted files Fix #280: gdImageWebpEx() quantization parameter is a misnomer Publish all gdImageCreateFromWebp*() functions and gdImageWebpCtx() Fix issue #276: Sometimes pixels are missing when storing images as BMPs Fix issue #275: gdImageBmpCtx() may segfault for non-seekable contexts Fix copy&paste error in gdImageScaleBicubicFixed() Added More documentation Documentation on GD and GD2 formats More tests
2016-10-05Add fix for CVE-2016-7568.taca3-2/+25
Bump PKGREVISION.
2016-08-03Fix unresolvable dependency.wiz1-2/+2
2016-08-03Revbump after graphics/gd updateadam1-2/+2
2016-08-02We welcome the 2.2.3 release around a month after 2.2.2 (we are getting ↵adam11-434/+18
consistent). Another important milestone in the GD 2.2 series. Security related fixes: This flaw is caused by loading data from external sources (file, custom ctx, etc) and are hard to validate before calling libgd APIs: * fix php bug 72339, Integer Overflow in _gd2GetHeader (CVE-2016-5766) * bug 247, A read out-of-bands was found in the parsing of TGA files (CVE-2016-6132) * also bug 247, Buffer over-read issue when parsing crafted TGA file (CVE-2016-6214) * bug 248, fix Out-Of-Bounds Read in read_image_tga Using application provided parameters, in these cases invalid data causes the issues: * Integer overflow error within _gdContributionsAlloc() (CVE-2016-6207) * fix php bug 72494, invalid color index not handled, can lead to crash ( CVE-2016-6128) * improve color check for CropThreshold Important update: * gdImageCopyResampled has been improved. Better handling of images with alpha channel, also brings libgd in sync with php's bundled gd.
2016-07-09Bump PKGREVISION for perl-5.24.0 for everything mentioning perl.wiz1-2/+2
2016-06-30Add fix for CVE-2016-6128 from upstream.taca3-3/+22
Bump PKGREVISION.
2015-11-18Recursive revbump from multimedia/libvpxryoon2-4/+4
2015-11-03Add SHA512 digests for distfiles for graphics categoryagc1-1/+2
Problems found with existing digests: Package fotoxx distfile fotoxx-14.03.1.tar.gz ac2033f87de2c23941261f7c50160cddf872c110 [recorded] 118e98a8cc0414676b3c4d37b8df407c28a1407c [calculated] Package ploticus-examples distfile ploticus-2.00/plnode200.tar.gz 34274a03d0c41fae5690633663e3d4114b9d7a6d [recorded] da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated] Problems found locating distfiles: Package AfterShotPro: missing distfile AfterShotPro-1.1.0.30/AfterShotPro_i386.deb Package pgraf: missing distfile pgraf-20010131.tar.gz Package qvplay: missing distfile qvplay-0.95.tar.gz Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
2015-09-25update gdlib-config version inforichard4-2/+41
bump PKGREVISION
2015-07-04Remove USE_X11BASE and X11PREFIX.joerg1-2/+2
2015-06-30Update to 2.1.1ryoon4-54/+40
Changelog: GD team proudly announces that the 2.1.1 version of GD Graphics Library has been released. We have fixed some reported bugs and improved the build scripts (cmake and configure). See the Changelog files for a full list with details or CVEs. This is a recommended update.
2015-06-30Recursive revbump from pkgsrc/multimedia/libvpx (buildink3.mk).ryoon1-2/+2
2015-06-30Recursive revbump from pkgsrc/multimedia/libvpx.ryoon1-2/+2
2015-06-12Recursive PKGREVISION bump for all packages mentioning 'perl',wiz1-2/+2
having a PKGNAME of p5-*, or depending such a package, for perl-5.22.0.
2015-04-12Upstream patch for overflow in gif parser (CVE-2014-9709)tnn3-3/+49
2015-02-25Fix buidlinking when libvpx option is not turned onadam1-5/+5
2014-12-14fixes copy&paste error from imlib2/buildlink3.mk.obache1-3/+3
2014-12-14handle for the case using pre-libvpx optional version.obache1-2/+11
2014-12-09Make libvpx a default-on option instead of a hard dependency.wiz3-7/+14
Based on patch by Thomas Orgis on pkgsrc-users.
2014-10-09Remove pkgviews: don't set PKG_INSTALLATION_TYPES in Makefiles.wiz1-3/+1
2014-05-29Bump for perl-5.20.0.wiz1-1/+2
Do it for all packages that * mention perl, or * have a directory name starting with p5-*, or * depend on a package starting with p5- like last time, for 5.18, where this didn't lead to complaints. Let me know if you have any this time.
2013-11-11Add upstream report URL per PR 48334.dholland2-3/+6
2013-11-11Don't use ceill(); it isn't needed here and causes problems. See PR 48334.dholland2-1/+19
Technically this change should bump PKGREVISION (as it changes the binary package ever so slightly for platforms where the ceill() didn't cause a build failure) but I'm going to let it slide.
2013-09-04recursive bump from graphics/gd shlib major bump.obache1-2/+2
2013-09-04Include libiconv. Fixes build on SunOS.jperkin1-1/+2
2013-09-03set HTTP master site, and curl is not required.obache1-3/+2
2013-09-03Use "curl" to fetch the distfile because the master site enforces thetron1-1/+2
use of HTTPS.
2013-09-02Changes 2.1.0:adam9-99/+59
* gdColorMapLookup() answers the RGB values according to given color map * Added support of variable resolution * new filter gdImagePixelate() * merged improvements that PHP GD team had made to GD Graphics Library * bugfixes
2013-06-04Try to fix the fallout caused by the fix for PR pkg/47882. Part 3:tron2-4/+4
Recursively bump package revisions again after the "freetype2" and "fontconfig" handling was fixed.
2013-06-03Bump freetype2 and fontconfig dependencies to current pkgsrc versions,wiz2-4/+4
to address issues with NetBSD-6(and earlier)'s fontconfig not being new enough for pango. While doing that, also bump freetype2 dependency to current pkgsrc version. Suggested by tron in PR 47882
2013-05-31Bump all packages for perl-5.18, thatwiz1-2/+2
a) refer 'perl' in their Makefile, or b) have a directory name of p5-*, or c) have any dependency on any p5-* package Like last time, where this caused no complaints.
2013-02-16Recursive bump for png-1.6.wiz2-4/+4
2013-01-26Revbump after graphics/jpeg and textproc/icuadam2-4/+4
2012-10-06Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-3/+1
2012-10-03Bump all packages that use perl, or depend on a p5-* package, orwiz1-2/+2
are called p5-*. I hope that's all of them.
2011-11-01Recursive bump for graphics/freetype2 buildlink addition.sbd2-4/+4
2011-01-13png shlib name changed for png>=1.5.0, so bump PKGREVISIONs.wiz2-4/+4
2011-01-06add a patch from upstream to fix a bug which made that fontconfigdrochner3-6/+15
support could not be switched off once enabled (could make a difference for gnuplot but I couldn't find a testcase yet)
2010-12-23Mechanically replace references to graphics/jpeg with the suitabledsainty2-4/+4
alternative from mk/jpeg.buildlink3.mk This allows selection of an alternative jpeg library (namely the x86 MMX, SSE, SSE2 accelerated libjpeg-turbo) via JPEG_DEFAULT=libjpeg-turbo, and follows the current standard model for alternatives (fam, motif, fuse etc). The mechanical edits were applied via the following script: #!/bin/sh for d in */*; do [ -d "$d" ] || continue for i in "$d/"Makefile* "$d/"*.mk; do case "$i" in *.orig|*"*"*) continue;; esac out="$d/x" sed -e 's;graphics/jpeg/buildlink3\.mk;mk/jpeg.buildlink3.mk;g' \ -e 's;BUILDLINK_PREFIX\.jpeg;JPEGBASE;g' \ < "$i" > "$out" if cmp -s "$i" "$out"; then rm -f "$out" else echo "Edited $i" mv -f "$i" "$i.orig" && mv "$out" "$i" fi done done
2010-06-23Make sure configure doesn't find an old (possibly non-Pkgsrc) libpng12-configdsainty1-2/+7
executable. If it does, it will override the Pkgsrc version, but fail to configure, and fail to build in PNG support. Bump PKGREVISION - previous revision may install for some without PNG APIs intact.
2010-06-13Bump PKGREVISION for libpng shlib name change.wiz2-4/+4
Also add some patches to remove use of deprecated symbols and fix other problems when looking for or compiling against libpng-1.4.x.
2010-01-18Second try at jpeg-8 recursive PKGREVISION bump.wiz2-4/+4
2009-10-22Oops, update distinfo.taca1-2/+2
2009-10-22Fix gd library security problem refering PHP's SVN repositry.taca3-3/+22
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546 Bump PKGREVISION. (This fix is for php5 only and I don't know about php4.)
2009-08-26bump revision because of graphics/jpeg updatesno2-4/+4
2009-05-18PKG_DESTDIR_SUPPORT needs to be before .include "options.mk"abs1-3/+3
generated by cgit v1.2.3 (git 2.39.1) at 2024-05-20 23:31:36 +0000