CVS log for pkgsrc/graphics/gd/distinfo

Up to [NetBSD + pkgsrc-wip] / pkgsrc / graphics / gd

Request diff between arbitrary revisions - Display revisions graphically

Keyword substitution: kv
Default branch: MAIN

add a patch from upstream to fix a bug which made that fontconfig
support could not be switched off once enabled
(could make a difference for gnuplot but I couldn't find a testcase yet)

Pullup ticket #2919 - requested by taca
gd: security patch

Revisions pulled up:
- graphics/gd/Makefile				1.81
- graphics/gd/distinfo				1.30-1.31
- graphics/gd/patches/patch-ad			1.1
---
Module Name:	pkgsrc
Committed By:	taca
Date:		Thu Oct 22 14:39:55 UTC 2009

Modified Files:
	pkgsrc/graphics/gd: Makefile distinfo
Added Files:
	pkgsrc/graphics/gd/patches: patch-ad

Log Message:
Fix gd library security problem refering PHP's SVN repositry.

	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546

Bump PKGREVISION.
(This fix is for php5 only and I don't know about php4.)
---
Module Name:	pkgsrc
Committed By:	taca
Date:		Thu Oct 22 15:20:53 UTC 2009

Modified Files:
	pkgsrc/graphics/gd: distinfo

Log Message:
Oops, update distinfo.

Oops, update distinfo.

Fix gd library security problem refering PHP's SVN repositry.

	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546

Bump PKGREVISION.
(This fix is for php5 only and I don't know about php4.)

PkgSrc changes:
  - allow optionally build a gd which supports xpm

Avoid dependency on libXpm; thanks to adrianp

Changes 2.0.35:
* Fix valgrind error in gdImageFillTiled
* Add missing custom cmake macros
* Avoid signature buffer copy  in gd_gif_c
* Race condition in gdImageStringFTEx
* Reading GIF images is not thread safe (static usage in private functions)
* GIF Local palette is read twice
* GIF, Use local frame dimension when possible instead of the logical screen size
* OpenVMS build support, see VMS/README.VMS for the details
* GIF, do not try to use the global colmap if it does not exist
* gdImageAALine draws axis lines with two pixels width
* TTF usage doesn't work properly on Netware
* gdImageArc CPU usage with large angles
* gdImageFilledRectangle regression fixed when used with reversed edges
* Possible infinite loop in libgd/gd_png.c, flaw found by Xavier Roche
* Fixed segfault when an invalid color index is present in a GIF image data
* Possible integer overflow in gdImageCreateTrueColor
* gdImageCreateXbm can crash if gdImageCreate fails

CVE-2006-2906 has been fixed upstream another way; this patch is unneeded

Pullup ticket 2022 - requested by salo
security update for gd

- pkgsrc/graphics/gd/Makefile				1.71-1.72
- pkgsrc/graphics/gd/distinfo				1.24-1.25
- pkgsrc/graphics/gd/patches/patch-ac			1.4-1.5

   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Wed Feb  7 20:28:49 UTC 2007

   Modified Files:
	   pkgsrc/graphics/gd: Makefile

   Log Message:
   Update HOMEPAGE.
---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Fri Feb 16 20:37:52 UTC 2007

   Modified Files:
	   pkgsrc/graphics/gd: Makefile distinfo
	   pkgsrc/graphics/gd/patches: patch-ac

   Log Message:
   Changes 2.0.34:
   * 32-bit multiplication overflow vulnerabilities along with a number of similar
     issues
   * Memory allocation errors that were not checked
   * Multiple issues in the GIF loader. Corrupt gif images would cause a segfault
     or infinite loop
   * Malformed or empty PNG image also may have caused segfaults
   * gdImageFillToBorder segfaulted when the color was not opaque (alpha > 0)
   * Antialiased lines drawn on an images edge caused a segfault
   * gdImageFill segfaulted when used with patterns or invalid arguments
   * gdImageFilledEllipse did not respect transparency
---
   Module Name:	pkgsrc
   Committed By:	adam
   Date:		Sat Feb 17 07:04:45 UTC 2007

   Modified Files:
	   pkgsrc/graphics/gd: distinfo
	   pkgsrc/graphics/gd/patches: patch-ac

   Log Message:
   Patch patch-ac

Patch patch-ac

Changes 2.0.34:
* 32-bit multiplication overflow vulnerabilities along with a number of similar
  issues
* Memory allocation errors that were not checked
* Multiple issues in the GIF loader. Corrupt gif images would cause a segfault
  or infinite loop
* Malformed or empty PNG image also may have caused segfaults
* gdImageFillToBorder segfaulted when the color was not opaque (alpha > 0)
* Antialiased lines drawn on an images edge caused a segfault
* gdImageFill segfaulted when used with patterns or invalid arguments
* gdImageFilledEllipse did not respect transparency

Pullup ticket 1702 - requested by salo
security fix for gd

Revisions pulled up:
- pkgsrc/graphics/gd/Makefile		1.68, 1.69, 1.70
- pkgsrc/graphics/gd/distinfo		1.23
- pkgsrc/graphics/gd/patches/patch-ac	1.3

   Module Name:	pkgsrc
   Committed By:	minskim
   Date:		Sun May 14 18:19:08 UTC 2006

   Modified Files:
	pkgsrc/graphics/gd: Makefile

   Log Message:
   Fix a pkglint warning.
---
   Module Name:	pkgsrc
   Committed By:	minskim
   Date:		Sun May 14 18:22:38 UTC 2006

   Modified Files:
	pkgsrc/graphics/gd: Makefile

   Log Message:
   This package installs a perl script.  Add a dependency on perl using
   USE_TOOLS.

   Bump PKGREVISION.
---
   Module Name:	pkgsrc
   Committed By:	salo
   Date:		Wed Jun 14 21:42:33 UTC 2006

   Modified Files:
	pkgsrc/graphics/gd: Makefile distinfo
   Added Files:
	pkgsrc/graphics/gd/patches: patch-ac

   Log Message:
   Security fix for CVE-2006-2906:

   "The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas
    Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote
    attackers to cause a denial of service (CPU consumption) via malformed
    GIF data that causes an infinite loop."

   Patch from Xavier Roche via Ubuntu.

Security fix for CVE-2006-2906:

"The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas
 Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote
 attackers to cause a denial of service (CPU consumption) via malformed
 GIF data that causes an infinite loop."

Patch from Xavier Roche via Ubuntu.

Do not define a variable in a header file; move the definition into .c
and leave the declraration only.  This fixes the graphviz build
problem reported by Adrian Portelli in PR pkg/28596.

Bump PKGREVISION.

Add RMD160 digests

Changes 2.0.33:
* Corrects a problem which prevented compiling with older versions of
  freetype2

Changes 2.0.32:
* Animated GIF writing support
* Fontconfig support
* Open polygon drawing
* Fixes

Checksum corrected for the archive re-release

Changes 2.0.28:
* Restored support for reading and writing GIF images
* Fix for a possible problem in gdImageTrueColorToPalette

Changes 2.0.27:
Fixes
* Potential memory overruns in gdImageFilled Polygon
* The sign of Y-axis values returned in the bounding box by gdImageStringFT

Changes 2.0.26:
* Windows build uses __stdcall calling convention
* Even more complete freetype version checking
* Binary transparency is now handled correctly in gdImageToPalette

Changes 2.0.25:
* Correction in gdfontl.h

Changes 2.0.24:
* bgd.dll is now compatible with Visual BASIC
* Even more complete freetype version checking
* Binary transparency is now handled correctly in gdImageToPalette

Changes 2.0.23:
* horizontal and vertical DPI hints can now be given to the freetype font
  renderer via the gdFTStringExtra
* several autoconf problems have been addressed
* the current version of freetype is more precisely detected to prevent
  FT_ENCODING_SYMBOL-related errors
* a significant bug in gdNewDynamicCtx was fixed

Changes 2.0.22:
* New font-fetching functions
* CMYK colour-space in JPEGs can now be opened
* Fixed configure script

Changes 2.0.21:
* added gdImageCreateFromPngPtr and similar

Changes 2.0.20:
	fixed binary API incompatibility introduced in 2.0.16

Changes 2.0.19:
	correcting problem with the built-in gd fonts on Unix

Changes 2.0.18:
	introduced a conveniently precompiled DLL for Windows programmers

	the default separator of alternative truetype font paths is now
	a semicolon rather than a space

Changes 2.0.17:
	minor compilation and packaging problem fixed

Changes 2.0.16:
	Adds polar coordinate transformation, text on a circle, thread safety
	truetype font output, performance optimizations, correct compilation
	with the latest versions of freetype, and many fixes

Update gd to 2.0.15
What's new:
* Support for truecolor images
* Support for alpha channels
* The specialized .gd and .gd2 file formats
* Documentation fixes
* Bug fixes

Use $(INSTALL) rather than "install". Fixes build on Solaris.

Update to 1.8.4:
* Add support for FreeType2 (John Ellson ellson@lucent.com)
[not used in the package right now]
* Add support for finding in fonts in a builtin DEFAULT_FONTPATH, or in a path
  from the GDFONTPATH environment variable.
* remove some unused symbols to reduce compiler warnings
* bugfix in size comparisons in gdImageCompare
* REXX now mentioned
* All memory allocation functions are now wrapped within the library; gdFree is
  exported and recommended for freeing memory returned by the
  gdImage(Something)Ptr family of functions.
Based on a package sent to tech-pkg by Adam Ciarcinski.

Convert to use buildlink.mk files and mark as USE_BUILDLINK_ONLY.  Also
use REPLACE_PERL instead of patching to replace /usr/bin/perl.

added support to fix the path to perl.

It seems that we need more generic way to replace the symbols (e.g. paths)
in the various files.

Move to sha1 digests, and/or add distfile sizes.

+ move the distfile digest/checksum value from files/md5 to distinfo
+ move the patch digest/checksum values from files/patch-sum to distinfo