CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2011/07/15 05:10:40
Modified files:
graphics/png : Makefile distinfo
graphics/png/patches: patch-scripts_libpng_pc_in
patch-scripts_makefile_openbsd
net/amsn : Makefile
Removed files:
graphics/png/patches: patch-libpng_3 patch-pngerror_c
Log message:
SECURITY update to png-1.5.4:
1. buffer overwrite in png_rgb_to_gray (CVE-2011-2690)
2. crash in png_default_error due to use of NULL Pointer (CVE-2011-2691)
3. memory corruption when handling empty sCAL chunks (CVE-2011-2692)