Number of commits found: 96

- new path on MASTER_SITES
- Security update to 1.4.11
Security: CVE-2011-3048
Feature safe:   yes

- set FROBIDDEN
Security: CVE-2011-3048
the updated versions 1.4.9 and 1.4.11 can not be build without disabling
features.
Update to 1.5.x cant be done while porst are frozen.
Feature safe:   yes

- Security patch
Security: CVE-2011-3026
Obtained from:  Debian

- update to 1.4.8

- enable option APNG
PR:             158716
Suggested by:   Mikhail T.

- bump PORTREVISION
- use compressed patch from original master
- remove obsolte ghostscript hooks

- update to 1.4.5

- update MASTER_SITES
distribution subdirs has changed

- update to 1.4.4

- fix option WITH_APNG
PR:             148413
Submitted by:   Klaus Aehlig
Feature safe:   yes

- Update to 1.4.3

PR:             ports/148214
Submitted by:   dinoex (maintainer)
Approved by:    portmgr
Security:       CVE-2010-1205
Feature safe:   yes

- mark FORBIDDEN, remote code injection possible
Security:       CVE-2010-1205
Security:       http://www.libpng.org/pub/png/libpng.html
Feature safe:   yes

- add MASTER_SITES
PR:             147774
Submitted by:   swell.k

- Introduce a new USE_XZ knob that handles lzma/xz compressed distfiles
- Convert a bunch of ports to use it

PR:             ports/146329
Submitted by:   mm
With hat:       portmgr

- new option WITH_APNG
PR:             146229

- enable PNG_READ_DITHER_SUPPORTED

- update to 1.4.1
Reviewed by:    exp8 run on pointyhat
Supported by:   miwi

- update to 1.2.43
PR:             144596
Submitted by:   Xin LI

- update to 1.2.42
PR:             142575

- take maintainership
- update to 1.2.41

Remove my maintainership

Upgrade to 1.2.40

PR:             138724
Submitted by:   bf <bf1783@gmail.com>

- Switch SourceForge ports to the new File Release System: categories starting
with G

Upgrade to 1.2.38

Update to 1.2.37

PR:             136207
Submitted by:   bf <bf1783@gmail.com>
Security:       CVE-2009-2042

Add MAKE_JOBS_SAFE

PR:             132998
Submitted by:   Martin Matuska <mm@FreeBSD.org>

Upgrade to 1.2.35
(fix for CVE-2009-0040)

Upgrade to 1.2.34

Upgrade to 1.2.33

PR:             128718
Submitted by:   bf <bf2006a@yahoo.com>

Update to 1.2.32 which includes security fix.

Security:       CVE-2008-3964
PR:             127502
Submitted by:   bf <bf2006a@yahoo.com>
Approved by:    portmgr (linimon)

update to 1.2.31

PR:             126988
Submitted by:   bf <bf2006a@yahoo.com>

Upgrade to 1.2.28

s,INSTALLS_SHLIB,USE_LDCONFIG,

Dist is rerolled with minor config changes and *.diff leftovers.
New dist does not match MD5/size stated on libpng homepage.
Until situation becomes clear, put the previous one at MASTER_SITE_LOCAL

Upgrade to 1.2.27
It fix CVE-2008-1382

PR:             123186
Submitted by:   bf <bf2006a@yahoo.com>

Upgrade to 1.2.26

PR:             122558
Submitted by:   bf <bf2006a@yahoo.com>

Upgrade to 1.2.25

PR:             121328

Install libpng.pc as symlink to libpng12.pc, some ports search it.

Submitted by:   Tim Bishop <tim@bishnet.net> (partially)

Update to 1.2.23

Upgrade to 1.2.22

PR:             117165
Submitted by:   Nick Barkas <snb@threerings.net>

Upgrade to 1.2.21

Update to 1.2.18

PR:             112725
Submitted by:   Nick Barkas <snb@threerings.net>
Approved by:    portmgr (pav)
Security:       VuXML ID 4cb9c513-03ef-11dc-a51d-0019b95d4f14

Upgrade to 1.2.14

Use another method to turn off assembler code on non-i386
It should produce correct pngconf.h

Upgrade to 1.2.12

Whitespace fix for portlint.
Set NO* or NO_* according to ${OSVERSION}

PR:             96420
Submitted by:   Rong-En Fan <rafan@infor.org>

Fix libpng-config

Submitted by:   Jo Rhett <jrhett@svcolo.com>

big whitespace cleanup (see ports/65409)

PR:             ports/65828
Submitted by:   trevor
Approved by:    ache

Use bz2 dist to save some space

PR:             82398
Submitted by:   Matthew Luckie <mjl@luckie.org.nz>

Remove pkgconfig rmdir, now created by mtree
Don't test dirs existance, mkdir -p not return error

Submitted by:   pav@FreeBSD.org

Additionly build/install libpng{12,}-config since many ports expect it

Upgrade to 1.2.8

Update to 1.2.7

Upgrade to 1.2.6 + official patch

Remove swrinde.nde.swri.edu from MASTER_SITES
It is reported it have problems not honoring BINARY mode when fetching
.txt files over proxy.

PR:             70232

Add official patches 0-11

Fix MASTER_SITES

Submitted by:   Pav Lucistnik <pav@FreeBSD.org>

Fix compiling with gcc 3.4

Submitted by:   Andreas Kohn <andreas@syndrom23.de>

In 16-bit samples case the starting offsets for the loops are calculated
incorrectly which may cause a buffer overrun beyond the beginning of
the row buffer.

Submitted by:   Robert Nagy <robert@openbsd.org>

Better fix for copy from overflow problem

Fix potential out of bounds copy from the string.

Change pre-install to pre-su-install

Submitted by: marcel

Minor enhancements, not affecting the resulting package:

        . run the vendor-supplied test automaticly upon building;
        . link the vendor-supplied test dynamicly (using -rpath to
          force the usage of the just-built library) -- to add another
          implicit test of the shared library's validity;
        . reword one of the shell commands as ``sed ... file'' instead
          of ``cat file | sed ...'';
        . modify one of the files to make it properly compilable by the
          icc -- gcc was, apparently, optimizing the junk out anyway.

Approved by:    maintainer (ache)

Clear moonlight beckons.
Requiem mors pacem pkg-comment,
And be calm ports tree.

E Nomini Patri, E Fili, E Spiritu Sancti.

Fix symlink, add unexec rmdir

Submitted by:   Jun Kuriyama <kuriyama@imgsrc.co.jp>

Install pkg-config data

Submitted by: Joe Marcus Clarke <marcus@marcuscom.com> (sligtly edited)

Upgrade to 1.2.5

Update to 1.2.4. Among other things, this version fixes potentian security
problem when mailformed png image can crash application (think about Mozilla).
Therefore, update is recommended.

Upgrade to 1.2.3

PR:             38709

Add libz to LDADD/DPADD

Link libpng library with libm, because it uses some math functions from it.
This should fix GNOME breakage introduced in the previous commit.

Prompted by:    Anders Andersson <anders@hack.org>

Use <bsd.lib.mk>

Submitted by:   ru

Add @dirrm include/libpng

Upgrade to 1.2.2

PR:             37277

Upgrade to 1.2.1    

Once we are determined that CPUID instruction is or isn't supported resfore  
initial state of the bit 21 of the eflag register. This reduces possibility  
that the threaded program linked with libpng will die due to arrival of the  
signal during probing for the CPU type. More proper fix has been committed  
into the -current kernel and will be MFC'ed soon, but this workaround is  
necessary for those with older systems.    

Upgrade to 1.2.0    

Fix master sites    

Update to 1.0.12.    

Update to 1.0.11    

Update to 1.0.10.    

Revert previous change making compilation of mmx-optimised routines a default  
option. It appears that resulting binary can't be used on a CPU without   mmx
instruction set (for example Pentium Pro).    

Correct message wordng.    

- Update to 1.0.9;   - compile in mmx-optimized assembler routines by default
(could be turned of     with WITHOUT_PNG_MMX option if necessary).    

Massive style enforcement - use ^I instead of spaces for variables identation.  
 

Rename PNG_WITH_MMX to WITH_PNG_MMX to be consistent with other WITH_*  
variables    

Rename WITH_MMX to PNG_WITH_MMX to allow it to be added to /etc/make.conf    

Update MMX-optimisation patch to 1.0.9pre3. This update doesn't affect anything 
 if USE_MMX not used.    

Add official patch (only affects MMX routines).    

Create ${WRKSRC} --> ${WRKDIR}/libpng sysmlink and use it in ghostscript ports  
instead of hardcoded ${WRKSRC}/libpng-png.version.number.    

Update to 1.0.8. This release includes experimental MMX support, but it should  
explicitly turned on by defining WITH_MMX make variable.    

At MAN3, s/libpng.4/libpng.3/    

Bump png shared library version.    

Update libpng to 1.0.7. Also add MASTER_SITE_SOURCEFORGE and appropriate WWW  
into PLIST while I'm here.    

Rename INSTALLS_SHLIBS to INSTALLS_SHLIB.  (There was a typo in the   previous
commit message to bsd.port.mk, which said INSTALL_SHLIBS.  Boo.)    

Fix MASSIVE typo INSTALL_SHLIBS --> INSTALLS_SHLIBS, which occured because I  
just cun'n'pasted the name from Satoshi's commit message without checking   it. 
  

Third round of INSTALL_SHLIBS=yes fixes.    

Number of commits found: 96

12 vulnerabilities affecting 17 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities