Update external dependencies

EyalAr / lwip

Light Weight Image Processor for NodeJS

MIT License

2.36k stars 231 forks source link

Update external dependencies #258

Closed Doridian closed 7 years ago

Doridian commented 8 years ago

Update Cimg to 1.7.3 Update giflib to 5.1.4 Update libjpeg to 9b Update libpng to 1.6.23

This addresses some potential security flaws in lwip (libpng in the version used currently contains some potentially high-level security bugs). Updated all other libs in the same go. tests pass.

Relevant CVEs for libpng specifically: https://www.cvedetails.com/cve/CVE-2015-8126/ https://www.cvedetails.com/cve/CVE-2015-8472/

coveralls commented 8 years ago

Coverage remained the same at 98.311% when pulling f0b5d81bac641df54a3b9a40853e3b05ae9ef479 on WatchBeam:master into a65f6086a26c22736eb4d7cfa43c096afad5b5e8 on EyalAr:master.

Pajk commented 7 years ago

In order to make lwip work with node 7.6.0 I had to update libpng and zlib to latest versions. If you are brave enough you can use https://www.npmjs.com/package/pajk-lwip v0.2.0.

https://github.com/Pajk/lwip/tree/development

ppascher commented 7 years ago

Thanks @Pajk . I was able to install lwip on node 7.7.1 with your development branch.