Commit graph

254072 commits

Author SHA1 Message Date
jperkin
01806535e4 PKGGNUDIR and PKGMANDIR fixes. 2016-09-08 14:28:40 +00:00
joerg
b9a45eb78e Updated pkgtools/bootstrap-mk-files to 20160908 2016-09-08 14:28:26 +00:00
joerg
f927905a3c bootstrap-mk-files-20160908:
Unless a platform explicitly sets DBG, default to -O2 on all
architectures. Most importantly, don't default to unoptimized builds
on AMD64.
2016-09-08 14:28:12 +00:00
adam
e969f70975 Updated graphics/py-gdmodule to 0.59 2016-09-08 14:14:33 +00:00
adam
8d2401a0bb Changes 0.59:
Bug fixes.
2016-09-08 14:13:07 +00:00
jperkin
d8496a14f4 Fix path to elfdump on SmartOS. 2016-09-08 09:55:32 +00:00
joerg
e9a8511669 Add PHP_VERSIONS_INCOMPATIBLE to filter out unsupported versions,
especially if a package requires newer versions.
2016-09-08 09:40:11 +00:00
abs
faefb558e7 Add missing entry to REPLACE_PERL 2016-09-08 09:38:08 +00:00
bouyer
33a0dc278b Updated cad/kicad to 4.0.4
Updated cad/kicad-doc to 4.0.4
Updated cad/kicad-lib to 4.0.4
Updated cad/kicad-footprints to version 4.0.4
Updated cad/kicad-i18n to version 4.0.4
2016-09-08 09:34:29 +00:00
bouyer
91651f086b Update kicad packages to 4.0.4, and apply a patch from the master branch
to make it build with newer boost library.
Changes since 4.0.1:
Do not allow spaces in component name (value field) in
    component library editor, in dialogs (Edit field, Create component).
Remove front silkscreen default setting for PTH and NPTH pads.
OSX: back port touchpad support from development branch.
Add support for optional touchpad panning (merge of rev. 6586 from
    development branch)
OSX: legacy canvas rendering speed improvements.
PolyLine.cpp: NormalizeAreaOutlines now removes null segments.
Remove support for in processing setting of ld library path.
Eeschema: make footprint and datasheet initially invisible, when creating a
    component.
Make color names translatable in color selection dialog.
Mark locked tracks with 'L' letter in status field.
Added 'Reset Grid Origin' hot key (GAL).
Add support for PCB and footprint format versioning
Highlight a net when crossprobing with eeschema and highlight net tool
    is enabled.
Make DRC markers not editable with the standard tools (GAL).
Draw arrows for DRC markers (GAL).

and lots of bug fixes.
2016-09-08 09:32:28 +00:00
wiz
e8fa643d39 Use standard dependency pattern. 2016-09-08 06:53:48 +00:00
richard
4a1113da28 Updated math/lp_solve to 5.5.2.3 2016-09-08 05:13:21 +00:00
richard
166437f176 Update to lp_solve_5.5.2.3 and indicate a 64-bit platform for aarch64
Fix isnan() checks to declare main() returning 'int' and use floating
argument to isnan() avoiding recent (gcc 5) compiler noise.

Since last update:
../../.. version 5.5.2.1
- fixed a small error in new and improved MIP_stepOF function to find integer solutions.

../../.. version 5.5.2.2
- For integer models with semi-cont variables it happened sometimes that a message
  "fillbranches_BB: Inconsistent equal-valued bounds for ..." occured and that the semi-cont condition
  was not respected.
- New functions added: get_accuracy to get the numeric accuracy after solve.
- New functions added: set_break_numeric_accuracy, get_break_numeric_accuracy to let lp_solve return ACCURACYERROR
  instead of FEASIBLE when numerical accuracy if worse then the provided values.
  In the past, lp_solve only returned a non-optimal status in case of very severe numerical instability.
  Now it will return already ACCURACYERROR when it finds a relative inaccuracy of 5e-7
- When reading a model from the lp-format and important issues are detected such as already bounds on variables being overruled
  later with for example a bin keyword, this is now reported in the default verbose level such that this is seen easier.

08/05/16 version 5.5.2.3
- For some models with integer variables, lp_solve did not find the most optimal solution.
2016-09-08 05:12:39 +00:00
markd
bf8076276f Update bibtool 2016-09-08 03:54:55 +00:00
markd
3ecd5b83fb Update BibTool to 2.65
2.65
* Hash function and value storing for field name mapping during xref
  expansion fixed.

2.64
* New resource expand.xdata introduced to control the
  expansion of xdata references.
* New resource crossref.map introduced to add a field name
  mapping for crossrefs.
* New resource clear.crossref.map introduced to clear the
  field name mapping for crossrefs.
* io.c introduced to contain input and output file parameters.
* Documentation switched to Lua\LaTeX.

2.63
* Omission of the previous release fixed.

2.62
* Combined rewrite and delete bug fixed.
* Minor improvements for the distribution.
* README renamed to README.md to comply with the
  conventions of the GitHub repository.

2.61
* New resource rename.field introduced to conditionally rename a
  field.
* Typedef String for Uchar* and used across.
* Duplicate file doc/bibtool.tex in the distribution tar ball
  eliminated.

2.60
* The field name and other symbols may start with any allowed
  character. Non-alpha characters at the beginning are treated as
  warning only.

2.59
* Fix in print.c to omit an empty line after overflowing lines.
* Fix in print.c to avoid an overflow situation.

2.58
* Library tex_def.rsc extended with the primitives \i and \j.
* The source tar is signed. The key of the author can be obtained
  from pgp.mit.edu.
* Test renamed to test.
2016-09-08 03:52:26 +00:00
taca
5c8cffc806 Update Contao Open Soure CMS to latest version.
www/contao35	3.5.16
	www/contao42	4.2.3
2016-09-08 03:28:10 +00:00
taca
bd3807f1b3 Update contao42 to 4.2.3.
### 4.2.3 (2016-09-06)

 * Do not double URL encode the content syndication links.
 * Use CSS3 transforms instead of transitions to animate the off-canvas navigation.
 * Improve the exception handling when using the resource locator (see #557).
 * Correctly reset the filter menu in parent view.
 * Support all characters but =!<> and whitespace in simple tokens (see contao/core#8436).
 * Check the user's permission when generating links in the picker (see contao/core#8407).
 * Handle forward pages without target in the navigation modules (see contao/core#8377).
 * Provide the same template variables for downloads and enclosures (see contao/core#8392).
 * Handle %n when parsing date formats (see contao/core#8411).
 * Fix the module wizard's accessibility (see contao/core#8391).
 * Correctly initialize TinyMCE in sub-palettes in Firefox (see contao/core#3673).
 * Validate form field names more accurately (see contao/core#8403).
 * Correctly show the ctime, mtime and atime of a folder (see contao/core#8408).
 * Correctly index changed pages (see contao/core#8439).
2016-09-08 03:27:23 +00:00
taca
c59dd054fc Update contao35 to 3.5.16.
Version 3.5.16 (2016-09-05)
---------------------------

### Fixed
Check if a reader page is protected when generating a sitemap (see #8416).

### Fixed
Support all characters but =!<> and whitespace in simple tokens (see #8436).

### Fixed
Check the user's permission when generating links in the picker (see #8407).

### Fixed
Handle forward pages without target in the navigation modules (see #8377).

### Fixed
Stop the event recurrence if the upper boundary is reached (see #8445).

### Fixed
Show upcoming events if the first occurrence is in the past (see #8447).

### Updated
Update MooTools to version 1.5.2.

### Fixed
Provide the same template variables for downloads and enclosures (see #8392).

### Fixed
Handle %n when parsing date formats (see #8411).

### Fixed
Fix the module wizard's accessibility (see #8391).

### Fixed
Correctly initialize TinyMCE in sub-palettes in Firefox (see #3673).

### Fixed
Validate form field names more accurately (see #8403).

### Fixed
Correctly show the ctime, mtime and atime of a folder (see #8408).

### Fixed
Correctly index changed pages (see #8439).

### Fixed
Always store the UUID of an uploaded file (see #8421).
2016-09-08 03:26:48 +00:00
taca
083d9b4e42 Limit to php70 and php71, php55 and php56 require php-stats 1.0.5. 2016-09-08 03:26:09 +00:00
dholland
a4f058b1d5 Fix PLIST after update. No version bump as it didn't build. Hi mef :-) 2016-09-08 01:48:39 +00:00
wen
06604c8d7b Updated geography/p5-Geo-Ellipsoid to 1.13 2016-09-08 01:12:18 +00:00
wen
e8d2e6967f Update to 1.13
Update HOMEPAGE
Add missing DEPENDS
Update COMMENT

Upstream changes:
1.13
    1. Use OO syntax to make subclassing possible.
    2. Add test file t/11-subclass.t
    3. Update require version of Test::More to 0.47.
    4. Minor POD changes.
    5. Clean up whitespace.
2016-09-08 01:11:28 +00:00
wen
f4e7adf380 Fix build with python3
Reported by:	joerg@
2016-09-08 01:01:15 +00:00
markd
5b8dad286b How to disable looking for libv4l2 changed. 2016-09-07 23:31:40 +00:00
alnsn
d3b154e85f Updated devel/py-lupa to 1.3. 2016-09-07 22:00:05 +00:00
alnsn
e0039f8eb3 Update devel/py-lupa to version 1.3.
Changes since version 1.1:

1.3 (2016-04-12)

     * eval() and execute() accept optional positional arguments
     * calling str() on a Python object from Lua could fail if the
       LuaRuntime is set up without auto-encoding
     * attribute/keyword names were not properly encoded if the LuaRuntime
       is set up without auto-encoding
     * built with Cython 0.24

1.2 (2015-10-10)

     * callbacks returned from Lua coroutines were incorrectly mixing
       coroutine state with global Lua state (patch by Mikhail Korobov)
     * availability of python.builtins in Lua can be disabled via
       LuaRuntime option.
     * built with Cython 0.23.4
2016-09-07 21:56:21 +00:00
szptvlfn
6882df5fdf Updated mail/sylpheed to 3.5.1 2016-09-07 21:14:13 +00:00
szptvlfn
62676d614e Update sylpheed to 3.5.1
changes:
* 3.5.1 (stable)

    * New plug-in APIs to handle compose view were added.
    * Autotools scripts were updated.
    * Included documents were updated.
2016-09-07 21:13:44 +00:00
joerg
990157a52e Since this violates the general prefix rules and won't build e.g. with
the recommendated setup of read-only root, mark it as not for bulk
builds.
2016-09-07 21:03:21 +00:00
wiz
163860f996 Updated textproc/mdocml to 1.13.4nb1 2016-09-07 18:50:14 +00:00
wiz
e14f9d3c7b Rename soelim to msoelim (per comment in upstream example) to fix
conflict with groff.

Requested by jperkin.

Bump PKGREVISION.
2016-09-07 18:50:05 +00:00
adam
5a12fb3ad8 Updated www/py-django-sekizai to 0.10.0 2016-09-07 13:58:40 +00:00
adam
83e4cc7b42 Changes 0.10.0:
Bug fixes.
2016-09-07 13:56:24 +00:00
adam
d0b4878a6d Updated www/py-django-classy-tags to 0.8.0; databases/py-sqlalchemy to 1.0.15; www/py-django-treebeard to 4.0.1 2016-09-07 13:47:11 +00:00
adam
3a4658d606 Release 4.0.1 (May 1, 2016)
* Escape input in forms
* Clarification on model detail pages
2016-09-07 13:45:29 +00:00
adam
a3789364f8 Release 1.0.15 features a small number of bug fixes that have been made over the past two months since the previous 1.0.x release. 2016-09-07 13:43:05 +00:00
adam
bb71606e07 Changes 0.8.0:
Bug fixes.
2016-09-07 13:41:50 +00:00
richard
52e5b52717 Apparently python3 insists that print arguments are inside parens
should fix PLIST issues on py34 & py35
2016-09-07 13:36:35 +00:00
mef
471d49950e Updated emulators/ROMInfo to 2.8 2016-09-07 13:26:45 +00:00
mef
91d76a7daa Updated emulators/ROMInfo to 2.8
--------------------------------
24/03/2008  *** v2.8 ***
            - Uses DatLib v2.24.
            - Fixed crash (allzip had spurious carriage returns in kyukaidk).
            - DatLib 2.23 also added the Generic XML format.
2016-09-07 13:25:45 +00:00
adam
7e2552dc68 Updated databases/mysql55 to 5.5.52; databases/mysql56 to 5.6.33 2016-09-07 13:14:53 +00:00
adam
37a2e83616 Changes in MySQL 5.5.52 (2016-09-06)
Bugs Fixed
----------
Replication: mysqlbinlog --read-from-remote-server log1 log2 was opening a new connection for log2 without freeing the connection used for log1. Thanks to Laurynas Biveinis for the contribution. (Bug 81675, Bug 23540182)

For mysqld_safe, the argument to --malloc-lib now must be one of the directories /usr/lib, /usr/lib64, /usr/lib/i386-linux-gnu, or /usr/lib/x86_64-linux-gnu. In addition, the --mysqld and --mysqld-version options can be used only on the command line and not in an option file. (Bug 24464380)

It was possible to write log files ending with .ini or .cnf that later could be parsed as option files. The general query log and slow query log can no longer be written to a file ending with .ini or .cnf. (Bug 24388753)

Privilege escalation was possible by exploiting the way REPAIR TABLE used temporary files. (Bug 24388746)

Certain internal character-handling functions could fail to handle a too-large character and cause a server exit. (Bug 23296299)

A blank server name in CREATE SERVER statements produced a server exit rather than an error. (Bug 23295288)

The optimizer failed to check a function return value for an area calculation, leading to a server exit. (Bug 23280059)

A prepared statement that used a parameter in the select list of a derived table that was part of a join could cause a server exit. (Bug 22392374, Bug 24380263)

MEDIUMINT columns used in operations with long integer values could result in buffer overflow. (Bug 19984392)

EINTR handling in the client library has been fixed so that interrupted read and write calls are retried. Previously, EINTR was ignored. (Bug 82019, Bug 23703570)
2016-09-07 13:13:36 +00:00
adam
79594814d5 Changes in MySQL 5.6.33 (2016-09-06)
Test Suite Notes
----------------
In mysql-test-run.pl, a limit of 50 was imposed on the number of workers for parallel testing, which on systems with more than 50 CPUs resulted in exhaustion of unique thread IDs. The ID-exhaustion problem has been corrected, and the limit of 50 on number of workers has been lifted. Thanks to Daniel Black for the patch on which this change was based. Additionally, these changes were made:

To avoid idle workers, the number of parallel workers now is limited to the number of tests.

Previously, if --parallel=auto was given and the MTR_MAX_PARALLEL environment variable was not set, a limit of 8 was imposed on the number of parallel workers. This limit has been lifted.

(Bug 22342399, Bug 79585)

Functionality Added or Changed
------------------------------
CMake support for compiling with Solaris Studio 12.5 was added. (Bug 82249, Bug 24303829, Bug 81274, Bug 23212938)

Bugs Fixed
----------
InnoDB: An operation that dropped and created a full-text search table raised an assertion. (Bug 24315031)

InnoDB: Accessing full-text search auxiliary tables while dropping the indexed table raised an assertion. (Bug 24009272)

InnoDB: An online DDL operation on a table with indexed BLOB columns raised an assertion during logging of table modifications. (Bug 23760086)

Replication: mysqlbinlog --read-from-remote-server log1 log2 was opening a new connection for log2 without freeing the connection used for log1. Thanks to Laurynas Biveinis for the contribution. (Bug 81675, Bug 23540182)

Replication: With binlog_row_image=FULL, when updating single tables temporary tables were unnecessarily being used. The fix ensures single table update follows the same pattern as multi-table update. (Bug 79867, Bug 22510353)

For mysqld_safe, the argument to --malloc-lib now must be one of the directories /usr/lib, /usr/lib64, /usr/lib/i386-linux-gnu, or /usr/lib/x86_64-linux-gnu. In addition, the --mysqld and --mysqld-version options can be used only on the command line and not in an option file. (Bug 24464380)

It was possible to write log files ending with .ini or .cnf that later could be parsed as option files. The general query log and slow query log can no longer be written to a file ending with .ini or .cnf. (Bug 24388753)

Privilege escalation was possible by exploiting the way REPAIR TABLE used temporary files. (Bug 24388746)

If the basedir system variable was set at server startup from the command line or option file, the value was not normalized (on Windows, / was not replaced with /). (Bug 23747899, Bug 82125)

In-place ALTER TABLE operations which when executed separately caused no table rebuild could when combined into a single statement result in a table rebuild. (Bug 23475211, Bug 81587)

A blank server name in CREATE SERVER statements produced a server exit rather than an error. (Bug 23295288)

A prepared statement that used a parameter in the select list of a derived table that was part of a join could cause a server exit. (Bug 22392374, Bug 24380263)

MEDIUMINT columns used in operations with long integer values could result in buffer overflow. (Bug 19984392)

A spurious ER_NO_SUCH_TABLE error could occur when attempting to execute a prepared CREATE TABLE ... SELECT statement that used a temporary table in the FROM clause and called a stored function. The same error could occur for a nonprepared version of the statement if used in a stored procedure when the procedure was re-executed. (Bug 16672723, Bug 68972)

EINTR handling in the client library has been fixed so that interrupted read and write calls are retried. Previously, EINTR was ignored. (Bug 82019, Bug 23703570)
2016-09-07 12:58:25 +00:00
adam
84625ac735 Updated www/curl to 7.50.2; devel/git to 2.10.0 2016-09-07 08:58:59 +00:00
adam
a7a5e7cb6c Changes 2.10.0:
UI, Workflows & Features

 * "git pull --rebase --verify-signature" learned to warn the user
   that "--verify-signature" is a no-op when rebasing.

 * An upstream project can make a recommendation to shallowly clone
   some submodules in the .gitmodules file it ships.

 * "git worktree add" learned that '-' can be used as a short-hand for
   "@{-1}", the previous branch.

 * Update the funcname definition to support css files.

 * The completion script (in contrib/) learned to complete "git
   status" options.

 * Messages that are generated by auto gc during "git push" on the
   receiving end are now passed back to the sending end in such a way
   that they are shown with "remote: " prefix to avoid confusing the
   users.

 * "git add -i/-p" learned to honor diff.compactionHeuristic
   experimental knob, so that the user can work on the same hunk split
   as "git diff" output.

 * "upload-pack" allows a custom "git pack-objects" replacement when
   responding to "fetch/clone" via the uploadpack.packObjectsHook.
   (merge b738396 jk/upload-pack-hook later to maint).

 * Teach format-patch and mailsplit (hence "am") how a line that
   happens to begin with "From " in the e-mail message is quoted with
   ">", so that these lines can be restored to their original shape.
   (merge d9925d1 ew/mboxrd-format-am later to maint).

 * "git repack" learned the "--keep-unreachable" option, which sends
   loose unreachable objects to a pack instead of leaving them loose.
   This helps heuristics based on the number of loose objects
   (e.g. "gc --auto").
   (merge e26a8c4 jk/repack-keep-unreachable later to maint).

 * "log --graph --format=" learned that "%>|(N)" specifies the width
   relative to the terminal's left edge, not relative to the area to
   draw text that is to the right of the ancestry-graph section.  It
   also now accepts negative N that means the column limit is relative
   to the right border.

 * A careless invocation of "git send-email directory/" after editing
   0001-change.patch with an editor often ends up sending both
   0001-change.patch and its backup file, 0001-change.patch~, causing
   embarrassment and a minor confusion.  Detect such an input and
   offer to skip the backup files when sending the patches out.
   (merge 531220b jc/send-email-skip-backup later to maint).

 * "git submodule update" that drives many "git clone" could
   eventually hit flaky servers/network conditions on one of the
   submodules; the command learned to retry the attempt.

 * The output coloring scheme learned two new attributes, italic and
   strike, in addition to existing bold, reverse, etc.

 * "git log" learns log.showSignature configuration variable, and a
   command line option "--no-show-signature" to countermand it.
   (merge fce04c3 mj/log-show-signature-conf later to maint).

 * More markings of messages for i18n, with updates to various tests
   to pass GETTEXT_POISON tests.

 * "git archive" learned to handle files that are larger than 8GB and
   commits far in the future than expressible by the traditional US-TAR
   format.
   (merge 560b0e8 jk/big-and-future-archive-tar later to maint).


 * A new configuration variable core.sshCommand has been added to
   specify what value for GIT_SSH_COMMAND to use per repository.

 * "git worktree prune" protected worktrees that are marked as
   "locked" by creating a file in a known location.  "git worktree"
   command learned a dedicated command pair to create and remove such
   a file, so that the users do not have to do this with editor.

 * A handful of "git svn" updates.

 * "git push" learned to accept and pass extra options to the
   receiving end so that hooks can read and react to them.

 * "git status" learned to suggest "merge --abort" during a conflicted
   merge, just like it already suggests "rebase --abort" during a
   conflicted rebase.

 * "git jump" script (in contrib/) has been updated a bit.
   (merge a91e692 jk/git-jump later to maint).

 * "git push" and "git clone" learned to give better progress meters
   to the end user who is waiting on the terminal.

 * An entry "git log --decorate" for the tip of the current branch is
   shown as "HEAD -> name" (where "name" is the name of the branch);
   the arrow is now painted in the same color as "HEAD", not in the
   color for commits.

 * "git format-patch" learned format.from configuration variable to
   specify the default settings for its "--from" option.

 * "git am -3" calls "git merge-recursive" when it needs to fall back
   to a three-way merge; this call has been turned into an internal
   subroutine call instead of spawning a separate subprocess.

 * The command line completion scripts (in contrib/) now knows about
   "git branch --delete/--move [--remote]".
   (merge 2703c22 vs/completion-branch-fully-spelled-d-m-r later to maint).

 * "git rev-parse --git-path hooks/<hook>" learned to take
   core.hooksPath configuration variable (introduced during 2.9 cycle)
   into account.
   (merge 9445b49 ab/hooks later to maint).

 * "git log --show-signature" and other commands that display the
   verification status of PGP signature now shows the longer key-id,
   as 32-bit key-id is so last century.
2016-09-07 08:56:32 +00:00
adam
57025b27a4 Fixed in 7.50.2 - September 7 2016
Bugfixes:
---------
mbedtls: Added support for NTLM
SSH: fixed SFTP/SCP transfer problems
multi: make Curl_expire() work with 0 ms timeouts
mk-ca-bundle.pl: -m keeps ca cert meta data in output
TFTP: Fix upload problem with piped input
CURLOPT_TCP_NODELAY: now enabled by default
mbedtls: set verbose TLS debug when MBEDTLS_DEBUG is defined
http2: always wait for readable socket
cmake: Enable win32 large file support by default
cmake: Enable win32 threaded resolver by default
winbuild: Avoid setting redundant CFLAGS to compile commands
curl.h: make CURL_NO_OLDIES define CURL_STRICTER
docs: make more markdown files use .md extension
docs: CONTRIBUTE and LICENSE-MIXING were converted to markdown
winbuild: Allow changing C compiler via environment variable CC
rtsp: accept any RTSP session id
HTTP: retry failed HEAD requests on reused connections too
configure: add zlib search with pkg-config
openssl: accept subjectAltName iPAddress if no dNSName match
MANUAL: Remove invalid link to LDAP documentation
socks: improved connection procedure
proxy: reject attempts to use unsupported proxy schemes
proxy: bring back use of "Proxy-Connection:"
curl: allow "pkcs11:" prefix for client certificates
spnego_sspi: fix memory leak in case *outlen is zero
SOCKS: improve verbose output of SOCKS5 connection sequence
SOCKS: display the hostname returned by the SOCKS5 proxy server
http/sasl: Query authentication mechanism supported by SSPI before using
sasl: Don't use GSSAPI authentication when domain name not specified
win: Basic support for Universal Windows Platform apps
nss: fix incorrect use of a previously loaded certificate from file
nss: work around race condition in PK11_FindSlotByName()
ftp: fix wrong poll on the secondary socket
openssl: build warning-free with 1.1.0 (again)
HTTP: stop parsing headers when switching to unknown protocols
test219: Add http as a required feature
TLS: random file/egd doesn't have to match for conn reuse
schannel: Disable ALPN for Wine since it is causing problems
http2: make sure stream errors don't needlessly close the connection
http2: return CURLE_HTTP2_STREAM for unexpected stream close
darwinssl: --cainfo is intended for backward compatibility only
speed caps: not based on average speeds anymore
configure: make the cpp -P detection not clobber CPPFLAGS
http2: use named define instead of magic constant in read callback
http2: skip the content-length parsing, detect unknown size
http2: return EOF when done uploading without known size
darwinssl: test for errSecSuccess in PKCS12 import rather than noErr
openssl: fix CURLINFO_SSL_VERIFYRESULT
2016-09-07 07:55:51 +00:00
wiz
2acadf89d5 Updated graphics/p5-GraphicsMagick to 1.3.25 2016-09-07 06:30:11 +00:00
wiz
6fdd27c3de Updated p5-GraphicsMagick to 1.3.25.
To match GraphicsMagick.
2016-09-07 06:30:01 +00:00
wiz
fd0f2ae9bd Updated graphics/GraphicsMagick to 1.3.25 2016-09-07 06:29:41 +00:00
wiz
55ec790e0c Updated GraphicsMagick to 1.3.25.
1.3.25 (September 5, 2016)
==========================

Special Issues:

* None

Security Fixes:

* EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
  overflow in EscapeParenthesis() used in the text annotation code.
  While not being able to reproduce the issue, the implementation of
  this function is completely redone.

* Utah RLE: Reject truncated/absurd files which caused huge memory
  allocations and/or consumed huge CPU.  Problem was reported by
  Agostino Sarubbo based on testing with AFL.

* SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
  the MVG rendering code (also impacts SVG).

* TIFF: Fix heap buffer read overflow while copying sized TIFF
  attributes.  Problem was reported by Agostino Sarubbo based on
  testing with AFL.

Bug fixes:

* GetToken(): Fix obscure bug (read beyond end of string buffer)
  noticed while parsing a MVG file.  This problem was reported by
  Gustavo Grieco.

* MVG rendering: Fix undesired hard errors when some objects were
  drawn outside of the image bounds.  Requests to draw objects
  entirely outside of the image should be silently ignored.

* MVG/SVG rendering: Fix gradient size sanity checks which were
  causing gradient requests to fail.  Due to a design weakness in that
  gradient images allocate resources rather than being computations at
  point of use, the maximum gradient image size is now hard-limited to
  5000x5000 pixels until the design problem is fixed.  Some SVG icons
  (as small as 8x8 pixels) authored using Inkscape request absurdly
  huge gradients.  Gradient sizes as large as 20,000x20,000 have been
  observed in SVG icon files delivered by packages on an Ubuntu Linux
  system.

* SVG: Fix some memory leaks which occur on parsing error.

New Features:

* None

Feature improvements:

* ElapsedTime(): Use clock_gettime() (when available with default
  linkage) to obtain elapsed time.

* DescribeImage(): Provide 6 digits of seconds precision in in elapsed
  time output.  Previously the resolution was rounded up to a full
  second.

Windows Delegate Updates/Additions:

* webp: Updated bundled libwebp to release 0.5.1.

* libxml: Updated bundled libxml2 to release 2.9.4.

* lcms: Updated bundled lcms2 to release 2.8.

* png: Update bundled libpng to release 1.6.24.

Build Changes:

* OpenMP is properly configured for clang 3.8 using its own '-lomp'
  rather than '-lgomp'.

Behavior Changes:

* SVG: Some SVG files may be rejected due to absurdly large gradient
  requests.

* The 'identify' and 'info' functionality only shows the pixel read
  rate if image was not read in 'ping' mode. Provide 6 digits of
  seconds precision in in elapsed time output.
2016-09-07 06:29:31 +00:00