| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
|
|
|
|
Several versions of libpng through 1.4.2 (and through 1.2.43 in
the older series) contain a bug whereby progressive applications
such as web browsers (or the rpng2 demo app included in libpng)
could receive an extra row of image data beyond the height reported
in the header, potentially leading to an out-of-bounds write to
memory (depending on how the application is written) and the
possibility of execution of an attacker's code with the privileges
of the libpng user (including remote compromise in the case of a
libpng-based browser visiting a hostile web site). This vulnerability
has been assigned ID CVE-2010-1205 (via Mozilla).
An additional memory-leak bug, involving images with malformed sCAL
chunks, is also present; it could lead to an application crash
(denial of service) when viewing such images.
Both bugs are fixed in versions 1.4.3 and 1.2.44.
version 1.4.3beta01 [June 18, 2010]
Added missing quotation marks in the aix block of configure.ac
The new "vstudio" project was missing from the zip and 7z distributions.
In pngpread.c: png_push_have_row() add check for new_row > height
version 1.4.3beta02 [June 18, 2010]
Removed the now-redundant check for out-of-bounds new_row from example.c
version 1.4.3beta03 [June 18, 2010]
In pngpread.c: png_push_finish_row() add check for too many rows.
version 1.4.3beta04 [June 19, 2010]
In pngpread.c: png_push_process_row() add check for too many rows.
Removed the checks added in beta01 and beta03, as they are now redundant.
version 1.4.3beta05 [June 20, 2010]
Rewrote png_process_IDAT_data to consistently treat extra data as warnings
and handle end conditions more cleanly.
Removed the new (beta04) check in png_push_process_row().
version 1.4.3rc01 [June 21, 2010]
Revised some comments in png_process_IDAT_data().
version 1.4.3rc02 [June 22, 2010]
Changed char *msg to PNG_CONST char *msg in pngrutil.c
Stop memory leak when reading a malformed sCAL chunk.
Removed some trailing blanks.
version 1.4.3rc03 [June 23, 2010]
Revised pngpread.c patch of beta05 to avoid an endless loop.
version 1.4.3 [June 26, 2010]
Updated some of the "last changed" dates.
|
|
|
|
Problem caught by bulk build.
|
|
executable. If it does, it will override the Pkgsrc version, but fail to
configure, and fail to build in PNG support.
Bump PKGREVISION - previous revision may install for some without PNG APIs
intact.
|
|
|
|
|
|
|
|
* Work comment view again, taken form upstream.
Bump PKGREVISION.
|
|
|
|
|
|
This is documentation for tex-metapost.
|
|
MetaPost uses a language based on that of MetaFont to produce precise
technical illustrations. Its output is scalable PostScript or SVG,
rather than the bitmaps MetaFont creates.
|
|
|
|
This is documentation for tex-eepic.
|
|
Extensions to epic and the LaTeX picture drawing environment, include
the drawing of lines at any slope, the drawing of circles in any radii,
and the drawing of dotted and dashed lines much faster with much less
TeX memory, and providing several new commands for drawing ellipses,
arcs, splines, and filled circles and ellipses. The package uses tpic
\special commands.
|
|
changes: bugfixes
|
|
changes:
-based on DCRaw v 8.99
* Lens distortion corrections using lenfun. This feature is now fully
implemented and enabled by default.
* Added a despeckling/denoising algorithm to solve issues with images taken
under very difficult lighting conditions, like deep sea diving.
It may be useful in other situations too. Patch by Frank van Maarseveen.
* Enabled hot pixel elimination by default.
* Calculate live histogram from working color-space instead of display
color-space. Calculate live histogram from cropped area only.
Based on patches by Konrad.
* Added auto-crop option.
* Allow upto 400% zoom.
pkgsrc change: the "lensfun" option is now enabled per default, as done
upstream
approved by gdt
|
|
changes:
-fixed minor vulnerabilities
-removed cosmetic comparation with zero in floating point
approved by gdt
|
|
changes:
-Complete the fixes for CVE-2009-2347.
-Tiffcrop now supports custom page sizes.
+minor bugfixes
|
|
|
|
gory details at http://www.remotesensing.org/libtiff/v3.9.3.html.
|
|
changes: some fixes and optimizations (API change)
|
|
While here,
* set LICENST=mit
* remove patch-a{a,b} from distinfo, it should be removed with update to 0.60.
0.60.1 (February 16, 2009)
This is maintenance release.
Changes in this release:
Bugfixes
Proper support for ruby 1.9/1.9.1+
Updated OpenGL enumerators in preparation for OpenGL 3.0
|
|
Also add some patches to remove use of deprecated symbols and fix other
problems when looking for or compiling against libpng-1.4.x.
|
|
so bump ABI depends.
Remove libpng.* from package, instead use buildlink to help some packages
that are looking for the library themselves instead of using pkg-config
or libpng-config.
Changes:
version 1.4.2:
Restored the macro definition of png_check_sig().
Conditionally compile an "else" statement in png_decompress_chunk().
Documented the fact that png_set_dither() was disabled since libpng-1.4.0.
Reenabled png_set_dither() but renamed it to png_set_quantize() to reflect
more accurately what it actually does. At the same time, renamed
the PNG_DITHER_[RED,GREEN_BLUE]_BITS macros to
PNG_QUANTIZE_[RED,GREEN,BLUE]_BITS.
Added some "(long)" typecasts to printf calls in png_handle_cHRM().
Relaxed the overly-restrictive permissions of some files.
Added the "vstudio" project to replace "visualc6" and "visualc71" which
will be removed from libpng-1.5.0.
Demonstrate in example.c that lang_key should be initialized.
Set PNG_NO_READ_BGR, PNG_NO_IO_STATE, and PNG_NO_TIME_RFC1123 in
contrib/pngminim/decoder/pngusr.h to make a smaller decoder application.
Include png_reset_zstream() in png.c only when PNG_READ_SUPPORTED is defined.
Removed dummy_inflate.c and uncompr.c from contrib/pngminim/encoder
Corrected PNG_UNKNOWN_CHUNKS_SUPPORTED to PNG_HANDLE_AS_UNKNOWN_SUPPORTED
in gregbook/readpng2.c
Corrected protection of png_get_user_transform_ptr. The API declaration in
png.h is removed if both READ and WRITE USER_TRANSFORM are turned off
but was left defined in pngtrans.c
Moved declarations of umsg[] inside the proper #ifdef blocks in pngrutil.c
version 1.4.1 [February 25, 2010]
Updated CMakeLists.txt for consistent indentation and to avoid an
unclosed if-statement warning (Philip Lowman).
Revised Makefile.am and Makefile.in to remove references to Y2KINFO,
KNOWNBUG, and libpng.la (Robert Schwebel).
Revised the makefiles to install the same files and symbolic
except for libpng.la and libpng14.la.
Make png_set|get_compression_buffer_size() available even when
PNG_WRITE_SUPPORTED is not enabled.
Revised Makefile.am and Makefile.in to simplify their maintenance.
Revised the makefiles to install a link to libpng14.so.14.1
Removed png_set_premultiply_alpha() from scripts/*.def
Revised png_decompress_chunk() to improve speed and memory usage when
decoding large chunks, using a two-pass method suggested by John Bowler.
Added png_set|get_chunk_malloc_max() functions.
Relocated "int k" declaration in pngtest.c to minimize its scope.
Folded some long lines in the source files.
Added defineable PNG_USER_CHUNK_CACHE_MAX and PNG_USER_CHUNK_MALLOC_MAX
Eliminated use of png_ptr->irowbytes and reused the slot in png_ptr as
png_ptr->png_user_chunk_malloc_max.
Return allocated "old_buffer" in png_push_save_buffer() before calling
png_error(), to avoid a potential memory leak.
Removed the cbuilder5 project, which has not been updated to 1.4.0.
Complete rewrite of two-pass png_decompress_chunk() by John Bowler.
Removed obsolete unused MMX-querying support from contrib/gregbook
Removed the AIX redefinition of jmpbuf in png.h
Define _ALL_SOURCE in configure.ac, makefile.aix, and CMakeLists.txt
when using AIX compiler.
Removed unused gzio.c from contrib/pngminim gather and makefile scripts
Changes to Libpng from version 1.2.42 to 1.4.0 (January 4, 2010)
Libpng-1.4.0 was released by the PNG Development Group on January
3, 2010. Important new features include support for the iTXt chunk
and a function for limiting the amount of memory that a possibly
malicious compressed chunk can consume. Some long-deprecated functions
and features have been removed. A new private header file that is
not visible to applications has been created, to improve our ability
to maintain binary compatibility among future libpng versions.
Specifically,
1. Private libpng prototypes and macro definitions were moved from
png.h and pngconf.h into a new pngpriv.h header file that is not
visible to applications.
2. Some obsolete/deprecated macros and functions have been removed.
a. We eliminated the obsolete, unused pnggccrd.c and pngvcrd.c files
and related makefiles.
b. We removed the typecasted NULL definitions such as
#define png_voidp_NULL (png_voidp)NULL
If you used these in your application, just use NULL instead.
c. We eliminated the PNG_1_0_X and PNG_1_2_X macros.
d. We eliminated the PNG_LEGACY_SUPPORTED macro.
e. We removed many WIN32_WCE #ifdefs.
f. We removed the functions png_read_init(info_ptr),
png_write_init(info_ptr), png_info_init(info_ptr),
png_read_destroy(), and png_write_destroy().
They have been deprecated since libpng-0.95.
g. We removed the png_permit_empty_plte() function. It has been
deprecated since libpng-1.0.9. Use png_permit_mng_features() instead.
h. We removed the obsolete stub functions png_get_mmx_flagmask(),
png_set_mmx_thresholds(), png_get_asm_flags(),
png_get_mmx_bitdepth_threshold(), png_get_mmx_rowbytes_threshold(),
png_set_asm_flags(), and png_mmx_supported()
i. We removed the obsolete png_check_sig(), png_memcpy_check(), and
png_memset_check() functions. Instead use !png_sig_cmp(),
png_memcpy(), and png_memset(), respectively, i.e.,
replace
png_check_sig(buf, 8)
with
png_sig_cmp(buf, 0, 8) == 0
replace
png_memcpy_check(png_ptr, dest, src, length)
with
png_memcpy(dest, src, length)
and replace
png_memset_check(png_ptr, dest, value, length)
with
png_memset(dest, value, length)
j. We removed support for global arrays to improve thread safety.
k. We removed support for numbered error messages by default, since we
never got around to actually numbering the error messages. The function
png_set_strip_error_numbers() was removed from the library by default.
l. The png_zalloc() and png_zfree() functions are no longer exported.
The png_zalloc() function no longer zeroes out the memory that it
allocates.
m. The function png_set_gray_1_2_4_to_8() was removed. It has been
deprecated since libpng-1.0.18 and 1.2.9, when it was replaced with
png_set_expand_gray_1_2_4_to_8() because the former function also
expanded palette images.
3. Several function prototypes were changed.
a. We changed the prototype for png_malloc() from
png_malloc(png_structp png_ptr, png_uint_32 size) to
png_malloc(png_structp png_ptr, png_alloc_size_t size)
b. We changed the prototypes of png_get_compression_buffer_size() and
png_set_compression_buffer_size() to work with png_size_t instead of
png_uint_32.
4. We added some new features:
a. We enabled iTXt chunk support by default. This changes the png_text
structure by adding the itxt_length, lang, and lang_key members.
b. We added the functions png_set_benign_errors(), png_benign_error(),
and png_chunk_benign_error(). With these, you can choose to treat
certain normally fatal errors as nonfatal.
c. Support for setting the maximum amount of memory that the application
will allocate for reading chunks was added, as a security measure.
The functions png_set_chunk_cache_max() and png_get_chunk_cache_max()
were added to the library.
d. We added the png_calloc() function and used it in place of
of "png_malloc(); png_memset();" except in the case in png_read_png()
where the array consists of pointers; in this case a "for" loop is used
after the png_malloc() to set the pointers to NULL, to give robust.
behavior in case the application runs out of memory part-way through
the process.
e. We implemented support for I/O states by adding png_ptr member io_state
and functions png_get_io_chunk_name() and png_get_io_state() in pngget.c
f. We added PNG_TRANSFORM_GRAY_TO_RGB to the available high-level
input transforms.
5. Other changes
a. We changed the names of the png_struct and info_struct members "trans"
and "trans_values" to "trans_alpha" and "trans_color", respectively.
b. Checking for and reporting of errors in the IHDR chunk is more thorough.
c. We removed the trailing '.' from the warning and error messages.
d. Direct access to png_ptr->jmpbuf has been deprecated since libpng
version 1.0.6, and libpng now generates a warning about it.
To avoid such warnings, change
setjmp(png_ptr->jmpbuf)
to
setjmp(png_jmpbuf(png_ptr))
|
|
Xs. (If not, fix emulators/vice as well, same type of fix.)
|
|
This switches to the gnome-2.30 release branch
|
|
* Exiv2 utility
- %a broken in rename
- It should be possible to insert newlines in text strings.
- Exif.Photo.UserComment unicode comment doesn't work
- Added -g option to 'grep' info for individual tags.
* Exiv2 library
- Pentax 645D makernote update
- Update of Pentax makernote
- Nikon Capture NX won't save a NEF file manipulated with exiv2 from SVN
- Padding of XMP data results in invalid XMP JPEG segment larger
than 65535 bytes
- Add XMP support for src/metacopy
- src/psdimage.cpp: operands of ? are integers of different signs
- Wrong conversion of IPTC SpecialInstructions in copyIptcToXmp()
- LLVM clang: error: default initialization of an object of const type
'class Exiv2::IptcData const' requires a user-provided default constructor.
- Exif.Image.SubIFDs should support more than 4 sub-IFDs
- Nikon Makernote tags regression in exiv 0.19
- ShutterSpeedValue should be a signed rational
- Allow XMP sidecar files which start with a UTF-8 BOM
- Image file gets deleted when writing to it
- Writing to read-only TIFF-like file fails
- "TIFF-safe" setExifData variant
- Optimize binary array elements
- Write support for Olympus RAW ORF files
- Incorrect Unicode encoding of Exif UserComment tag
- LensType not reported for Pentax K-x
- Add support for makernote of Sony ARW files
- Unable to write GPS data in ORF files with digikam
|
|
|
|
|
|
|
|
|
|
* ghostscript-font-std part had been moved from ghostscript-fonts to
urw-fonts. add dependency on urw-fonts and adjust gs-font-dir.
Bump PKGREVISION (and ABI bump).
|
|
From obache@
|
|
Set LICENSE.
|
|
Bump PKGREVISION.
|
|
|
|
This package contains the symbolic icons for the GNOME icon sets.
|
|
|
|
This package contains the extra icons for the GNOME icon sets.
|
|
directory GNOME stopped using. Override two more start-here icons
with the NetBSD logo.
Bump PKGREVISION.
|
|
2.30.3
- add high resolution volume icons. bug #618021
2.30.2.1
- revert filename change for mail-mark-not(-)junk. bug #616954
- remove old ruby render script
- build system fixes
2.30.2
- tweaks to edit-delete
- publicshare folder to use same metaphor as emblem-shared
- new icon avatar-default to replace stock_person
- remove media-zip and jaz.
- lighten up displays and computers (bug #616325)
2.30.1
- re-add mail icons
- sharper print preview icons
- remove shadows form some 16x16s
- re-add text-x-preview (no clipping rectangle though) bug #615194
- nautilus app icon fixes
- new edit-delete metaphor (x). http://www.bomahy.nl/hylke/blog/remove-the-remove-icon/
2.30.0
- Bengali translation
- remove arrows from format-justify-*
2.29.3
- --enable-icon-mapping works (thanks Luca)
- edit-find and edit-find-replace finetuned
- redundant system-search tweaked rather than dropped for now
2.29.2
- bugfix: misplaced process-working
2.29.1
- added .pc file back bug #606245
- missing emoticons
- accessories-dictionary at 24x24px
- highres web-browser
- changes-prevent and changes-allow to replace stock-lock icons. bug #611480
- progress-working from 2.28
2.29.0
- initial release of the highres-laden icon theme
|
|
|
|
This is documentation for tex-asyfig.
|
|
The package provides a means of reading Asymptote figures from separate
files, rather than within the document, as is standard in the asymptote
package, which is provided as part of the Asymptote bundle. The
asymptote way can prove cumbersome in a large document; the present
package allows the user to process one picture at a time, in simple test
documents, and then to migrate (with no fuss) to their use in the target
document.
|
|
* Several bugs in filename sorting in the Dolphin file manager have been
fixed
* Issues with encoded filenames in ZIP archives have been fixed
* A number of bugs in games, such as KMines, KNetwalk and LSkat and
KSpaceDuel have been fixed
The changelog lists more
|
|
Clutter-GTK 0.10.4 18/03/2010
==================================
* Depend on gtk+ >= 2.19.5
* Depend on clutter >= 1.2.0
* Fix introspection annotations for GtkClutterEmbed,
GtkClutterScrollable and GtkClutterZoomable
* Do no use deprecated gtk+ API
* Documentation fixes
|
|
Clausen in PR 37720.
|
