From owner-freebsd-ports-bugs@FreeBSD.ORG Wed Jul 1 03:30:02 2009 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 45145106564A for ; Wed, 1 Jul 2009 03:30:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 20E128FC18 for ; Wed, 1 Jul 2009 03:30:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n613U1XF054307 for ; Wed, 1 Jul 2009 03:30:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n613U1KS054304; Wed, 1 Jul 2009 03:30:01 GMT (envelope-from gnats) Resent-Date: Wed, 1 Jul 2009 03:30:01 GMT Resent-Message-Id: <200907010330.n613U1KS054304@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, bf Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A8E9D106566C for ; Wed, 1 Jul 2009 03:21:14 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id 9784F8FC16 for ; Wed, 1 Jul 2009 03:21:14 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.3/8.14.3) with ESMTP id n613LEDm024737 for ; Wed, 1 Jul 2009 03:21:14 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.3/8.14.3/Submit) id n613LEPa024736; Wed, 1 Jul 2009 03:21:14 GMT (envelope-from nobody) Message-Id: <200907010321.n613LEPa024736@www.freebsd.org> Date: Wed, 1 Jul 2009 03:21:14 GMT From: bf To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: ports/136207: [PATCH]: graphics/png: update to 1.2.37 (security) X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Jul 2009 03:30:02 -0000 >Number: 136207 >Category: ports >Synopsis: [PATCH]: graphics/png: update to 1.2.37 (security) >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Wed Jul 01 03:30:01 UTC 2009 >Closed-Date: >Last-Modified: >Originator: bf >Release: 8-CURRENT amd64 >Organization: - >Environment: >Description: A fix for CVE-2009-2042: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2042 and some other small changes that have been taking place in the course of normal development. >How-To-Repeat: >Fix: Patch attached with submission follows: diff -ruN png.orig/Makefile png/Makefile --- png.orig/Makefile 2009-06-30 23:08:26.000000000 -0400 +++ png/Makefile 2009-06-30 23:11:18.000000000 -0400 @@ -6,12 +6,11 @@ # PORTNAME= png -PORTVERSION= 1.2.35 +PORTVERSION= 1.2.37 CATEGORIES= graphics MASTER_SITES= ${MASTER_SITE_SOURCEFORGE} MASTER_SITE_SUBDIR= lib${PORTNAME} DISTNAME= lib${PORTNAME}-${PORTVERSION} - #PATCH_SITES= ${MASTER_SITES} #PATCH_SITE_SUBDIR= ${MASTER_SITE_SUBDIR} #PATCHFILES= diff -ruN png.orig/distinfo png/distinfo --- png.orig/distinfo 2009-06-30 23:08:26.000000000 -0400 +++ png/distinfo 2009-06-30 22:53:52.000000000 -0400 @@ -1,3 +1,3 @@ -MD5 (libpng-1.2.35.tar.bz2) = b8b8d09adf6bee2c5902c8e54c4f2e68 -SHA256 (libpng-1.2.35.tar.bz2) = cafe6431f9e6d561fb7b396bf94ff73a9cd0f4279f3eea2fc714ab90e345eee6 -SIZE (libpng-1.2.35.tar.bz2) = 650154 +MD5 (libpng-1.2.37.tar.bz2) = 6d1ee0888dbb711214943cb19c294b49 +SHA256 (libpng-1.2.37.tar.bz2) = 682960b55527b54bada90e959c2d42679444a1db43677c77eb645a29645f86d1 +SIZE (libpng-1.2.37.tar.bz2) = 660314 diff -ruN png.orig/files/patch-ab png/files/patch-ab --- png.orig/files/patch-ab 2009-06-30 23:08:26.000000000 -0400 +++ png/files/patch-ab 2009-06-30 23:06:05.000000000 -0400 @@ -12,7 +12,7 @@ Name: libpng Description: Loads and saves PNG files - Version: 1.2.35 + Version: 1.2.37 -Libs: -L${libdir} -lpng12 +Libs: -L${libdir} -lpng -lz -lm Cflags: -I${includedir} >Release-Note: >Audit-Trail: >Unformatted: