CVSROOT:        /cvs
Module name:    ports
Changes by:     [email protected]   2011/07/15 05:10:40

Modified files:
        graphics/png   : Makefile distinfo 
        graphics/png/patches: patch-scripts_libpng_pc_in 
                              patch-scripts_makefile_openbsd 
        net/amsn       : Makefile 
Removed files:
        graphics/png/patches: patch-libpng_3 patch-pngerror_c 

Log message:
SECURITY update to png-1.5.4:
1. buffer overwrite in png_rgb_to_gray (CVE-2011-2690)
2. crash in png_default_error due to use of NULL Pointer (CVE-2011-2691)
3. memory corruption when handling empty sCAL chunks (CVE-2011-2692)

Reply via email to