5736 Commits

Author SHA1 Message Date
jasper
39fb0257fc Fix for CVE-2016-6161; from upstream 2016-07-06 08:46:01 +00:00
landry
897aaeff42 Tidy up Makefile, also from Rafael Sadowski 2016-07-04 17:38:40 +00:00
landry
561ceb886c Add null check for boost::optional<Geom::Crossing> and return empty
OptCrossing to fix a crash with snapping, all from Rafael Sadowski,
thanks!

ok sthen@
2016-07-04 16:57:46 +00:00
jasper
f5805595b3 fixes for CVE-2011-5326, CVE-2016-3993, CVE-2016-3994, CVE-2016-4024 2016-07-01 13:04:32 +00:00
jasper
a5f9cad7b7 fixes for CVE-2016-3186 and CVE-2016-5875 2016-07-01 11:23:44 +00:00
jasper
6330f36610 security update to optipng-0.7.6, addressing "CVE-2016-2191 optipng: Invalid
write while processing delta escapes without any boundary checking" as well as
a bunch of other bugs
2016-07-01 07:44:19 +00:00
jasper
8670738917 Security fix for CVE-2016-6128 (libgd does not properly handle invalid color
index which could lead to a denial of service against applications using the
libgd library).
2016-06-30 13:27:42 +00:00
sthen
4cf3c30061 update to ImageMagick-6.9.4.10 2016-06-27 23:10:47 +00:00
jasper
f39af64cfb update to evince-3.20.1 2016-06-27 11:20:49 +00:00
sthen
cd744b201e update to p5-Image-ExifTool-10.20, from patrick keshishian 2016-06-27 09:05:05 +00:00
landry
5ee8b983bd Update to nomacs 3.2.0, from maintainer Rafael Sadowski 2016-06-27 05:25:40 +00:00
sthen
88d6d45711 bump revision (missed, I did previous commit from patches/) 2016-06-25 12:36:34 +00:00
sthen
62274a10a5 fix with libjpeg-turbo 1.5.0, from Brad 2016-06-25 12:35:56 +00:00
sthen
f6e4e1e15f update to libjpeg-turbo 1.5.0, from Brad, bulk build tested by me 2016-06-25 12:34:30 +00:00
sthen
de429b4e43 Don't use std::string for a non-0-terminated string, fixing an out-of-bounds
read crash with DNG files. From Sven Gaerner.
2016-06-24 13:56:57 +00:00
dcoppa
8683baa2c0 Update to feh-2.16.1 2016-06-24 10:02:30 +00:00
ajacoutot
6482af51e7 xlib: Fix double free in _get_image_surface() - from upstream
ok eric@ (maintainer)
2016-06-23 07:34:07 +00:00
ajacoutot
b4bfcc49b1 Update to libgxps-0.2.4. 2016-06-21 13:22:53 +00:00
ajacoutot
3a0100d350 Update to shotwell-0.23.2. 2016-06-21 12:38:07 +00:00
jasper
032a4d0212 - update to birdfont-2.16.4
- drop gettext module
2016-06-20 10:27:56 +00:00
jasper
d6e7e8db9a update to birdfont-2.16.2 2016-06-17 18:28:42 +00:00
naddy
6dd43b6f6c maintenance update to 1.6.23 after Brad sent me an equivalent diff for .22 2016-06-14 17:26:19 +00:00
sthen
ee2f231f8a bugfix update to ImageMagick-6.9.4-9 2016-06-13 13:17:57 +00:00
jasper
cc12b515ea update to birdfont-2.16.0 2016-06-13 08:56:00 +00:00
sthen
5c64d9cf5f update to ImageMagick 6.9.4-8, from Brad (fixes include a heap overflow) 2016-06-11 11:58:00 +00:00
sthen
d3ed1b38e3 update to GraphicsMagick-1.3.24, from Brad (maintainer) 2016-06-11 11:48:17 +00:00
dcoppa
e906e27485 Update to feh-2.16 2016-06-09 10:56:59 +00:00
landry
ffe8330bde Backport bugfix from https://bugs.launchpad.net/inkscape/+bug/1587311 to
fix crashes edd@ was experiencing.

From Rafael Sadowski (who takes maintainership) thanks!
2016-06-04 07:00:28 +00:00
sthen
2f532da190 your regular scheduled ImageMagick update to disable stupid stuff,
this time indirect reads by using @ in the filename. also, upstream
disabled popen by default, so no need for the autoconf trick.
2016-06-02 14:51:41 +00:00
sthen
45878d9507 Update to ImageMagick-6.9.4-5. Similar diff (but without the bump) from
Rafael Sadowski.
2016-05-31 09:00:40 +00:00
sthen
384503724e Update to ImageMagick-6.9.4-4.
While there, neuter popen support ("convert '|echo Hello > hello.txt;' null:")
http://openwall.com/lists/oss-security/2016/05/29/7
2016-05-30 12:02:53 +00:00
dcoppa
b9088febfd Bugfixing update to feh-2.15.4 2016-05-29 19:57:47 +00:00
sthen
eb7579d042 update to geeqie-1.3 2016-05-28 13:59:51 +00:00
naddy
098691e6f0 maintenance update to 0.2.5 (translation updates) and drop gettext module 2016-05-27 10:08:44 +00:00
ajacoutot
9249967466 Update to shotwell-0.23.1. 2016-05-24 05:35:28 +00:00
sthen
bb1e719842 update to 20160426 snapshot of zxing, main change is a fix to Code 39 decodes
that rqeuires too much quiet zone.
2016-05-20 19:06:57 +00:00
sthen
41349f5b45 update to ImageMagick 6.9.4-3
* Fix pixel cache on disk regression
* Quote passwords when passed to a delegate program
* Can read geo-related EXIF metdata once-again
* Sanitize all delegate emedded formatting characters
* Don't sync pixel cache in AcquireAuthenticCacheView()
2016-05-19 19:49:14 +00:00
sthen
cc4b468c4f Make sure we pull in errno.h for all files in sane-backends that use
errno. This is a requirement on OpenBSD now that errno is stored in the
TIB; most uses have already been taken care of, but this slipped through
the cracks as it only provides a dlopen()'d module rather than object
code which is linked during build.  ok guenther@ ajacoutot@

Note to readers, if you see "undefined symbol 'errno'" messages when you
run or use programs on OpenBSD following this change (libc 87.0 etc.),
please report them, even if the program appears to otherwise run normally.
2016-05-18 20:02:27 +00:00
sthen
d7c949fba8 committed upstream 2016-05-18 17:24:14 +00:00
sthen
79dd13eae9 Patch Barcode::DataMatrix to allow manual setting of matrix sizes.
Take maintainer.
2016-05-18 10:31:26 +00:00
jca
d6af3bb4ee Unhook lua52-flavored packages broken at runtime; ok jasper@ 2016-05-17 11:26:14 +00:00
sthen
c7b2640077 update to ImageMagick 6.9.4-1
- Remove https delegate.
- Check for buffer overflow in magick/draw.c/DrawStrokePolygon().
- Replace show delegate title with image filename rather than label.
- Fix GetNextToken() off by one error.
- Remove support for internal ephemeral coder.
2016-05-12 21:49:15 +00:00
espie
16c6d939fa Term-ReadKey is part of the base system now 2016-05-12 14:00:12 +00:00
ajacoutot
92c0c842d3 Update to libwebp-0.5.0.
from Brad
2016-05-09 06:31:56 +00:00
ajacoutot
bee4ca34e8 SECURITY: gd2: handle corrupt images better (CVE-2016-3074)
from Brad
2016-05-09 06:29:18 +00:00
pascal
b01174ae9b Update my mail address. 2016-05-07 12:40:56 +00:00
sthen
daf92c851b update to darktable-2.0.4 2016-05-06 21:47:59 +00:00
sthen
a406b733fd make sure -current pkgname/revision are higher than stable 2016-05-06 21:39:03 +00:00
sthen
17f1528ad7 update to ImageMagick 6.9.3-10, additional sanitisation of input filenames for
http/https delegates above what was already done in 6.9.3-9. (security)
https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588
2016-05-06 20:16:35 +00:00
naddy
c1fbcfee6b x11/openmotif -> x11/motif 2016-05-05 19:52:28 +00:00