---
- branch: MAIN
  date: Thu Dec 29 18:41:03 UTC 2016
  files:
  - new: '1.187'
    old: '1.186'
    path: pkgsrc/graphics/png/Makefile
    pathrev: pkgsrc/graphics/png/Makefile@1.187
    type: modified
  - new: '1.132'
    old: '1.131'
    path: pkgsrc/graphics/png/distinfo
    pathrev: pkgsrc/graphics/png/distinfo@1.132
    type: modified
  id: 20161229T184103Z.c93f7d785aa34fbba0b2c323efbda89a6a073295
  log: |
    Updated png to 1.6.27, security fix release.

    Version 1.6.27beta01 [November 2, 2016]
      Restrict the new ADLER32-skipping to IDAT chunks.  It broke iCCP chunk
        handling: an erroneous iCCP chunk would throw a png_error and reject the
        entire PNG image instead of rejecting just the iCCP chunk with a warning,
        if built with zlib-1.2.8.1.

    Version 1.6.27rc01 [December 27, 2016]
      Control ADLER32 checking with new PNG_IGNORE_ADLER32 option.
      Removed the use of a macro containing the pre-processor 'defined'
        operator.  It is unclear whether this is valid; a macro that
        "generates" 'defined' is not permitted, but the use of the word
        "generates" within the C90 standard seems to imply more than simple
        substitution of an expression itself containing a well-formed defined
        operation.
      Added ARM support to CMakeLists.txt (Andreas Franek).

    Version 1.6.27 [December 29, 2016]
      Fixed a potential null pointer dereference in png_set_text_2() (bug report
        and patch by Patrick Keshishian).
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/graphics/png'
  unixtime: '1483036863'
  user: wiz