commit: d936b8ae0be80754a7474c38768356b2850079e9 Author: Doug Goldstein <cardoe <AT> gentoo <DOT> org> AuthorDate: Fri Feb 26 02:25:58 2016 +0000 Commit: Doug Goldstein <cardoe <AT> gentoo <DOT> org> CommitDate: Fri Feb 26 02:25:58 2016 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d936b8ae
media-libs/libpng: remove vulnerable version Remove version 1.6.18 which is vulnerable to CVE-2015-8126. Gentoo-Bug: 565678 Package-Manager: portage-2.2.26 Signed-off-by: Doug Goldstein <cardoe <AT> gentoo.org> media-libs/libpng/Manifest | 2 -- media-libs/libpng/libpng-1.6.18.ebuild | 43 ---------------------------------- 2 files changed, 45 deletions(-) diff --git a/media-libs/libpng/Manifest b/media-libs/libpng/Manifest index 01eee45..53e1cea 100644 --- a/media-libs/libpng/Manifest +++ b/media-libs/libpng/Manifest @@ -1,8 +1,6 @@ DIST libpng-1.2.56.tar.xz 654688 SHA256 24ce54581468b937734a6ecc86f7e121bc46a90d76a0d948dca08f32ee000dbe SHA512 b50cd58246590267fb123d8618387897d438cdc9514e69ca346bd09c5013845d2ca35933b236b31af9d81ae738afa7b01e9a332bcf099f4fa0e3b85048a4ac5f WHIRLPOOL 436209348dde13751e8c326b8a9bceacca281e3d59e548af7eb9246fb14ee2f657e3c10437f04148a0c244f2d3bc231260fb57a2cd145d87b5d07ef5e49a8b1d DIST libpng-1.5.26-apng.patch.gz 10318 SHA256 bcc0d7f1154a5004610a9102f25ce6f35985a6033cfb52887f3f2b11017fcd45 SHA512 f7e5228fab036e63be3de58f2f85041d834e2292d04682f0b20930d5cd58c078796a8c3d6742cd28c7dc808ac641aa5d5bfe6f8daee5fb2b0b75bfb856170861 WHIRLPOOL 449212c403b6e8c5724e402655b42d23ed3e27d3902b219767b663fab08dedc19e684497a1be4326a99ef4b8cc26eb6acdd1ed1b0ccc0c282f19a50b1c831d28 DIST libpng-1.5.26.tar.xz 748164 SHA256 7ba4d85efb79e60d7a8a84bca6a0b925e043bfb5c8a47a1b878ab4d3bcd6714d SHA512 87214671af84665277f0ac3226e6feb41a3e1deb0d7d61e62c99e77d1386fcf928b21f9863c4166a7391230166190bad00e57c3fc42902b3a0a53ba68d4db1f5 WHIRLPOOL e2eda0792fc5f6b41d4f5d878fdf4c8bde0cac2591647a092fed0e6f362fd9c532d265ca7dcdcd8ade9bc23fa385bfa71bd8b532e3d1091202583230a9306724 -DIST libpng-1.6.18-apng.patch.gz 9940 SHA256 1d595b3b33c09529dddf869ca69f386528dfe1b991d2679377082e2acbca7009 SHA512 ebf8e2d11b18afc0943502be069076fbe07792e8056058551de0b1cf07987a6cf423edaa5de7aefb318115054235d984059a83aad93b06bed1a56002a0b6bd9b WHIRLPOOL d177ef6a4846956e8a2768b5beb5e18a6e9db2d03ef32e6ff21f79994f8274175b8bba01def0f85af4cd6640050173291e7a54c148076cbb8397e886257f83b8 -DIST libpng-1.6.18.tar.xz 932324 SHA256 2e10c13b7949883ac961db6177c516d778184432d440317e9f0391305c360963 SHA512 7ae286f728844da31699c3097cfb2167d4a57f740c749f0251de86ae481824716b3edaafc1b5673116623e729396ccc720a346439d3b20c5b6a7b06e1d129f74 WHIRLPOOL 1f9662073172eb2fa11924f79efd4d7dd0979696359f48f67addf5325148d898982d361879892acaa60441dd4fe42cd38ae68affc08302fa5ffc2b6731731a88 DIST libpng-1.6.19-apng.patch.gz 10330 SHA256 5ec713a51c35c25d5e53dd61270a6fd5313b26872b382f0fbaed41a0743768a2 SHA512 2d412a74d657d366d395d13bc301d71363011fbcafbbf815dba565baca4069629450a97dfaab0ddeec7c7f646a6eddeac559d24f6910a34b072aa4a208dc4e16 WHIRLPOOL 4e093bcddbf114dda0c33eddac70b245f91c659f378d129731d3e486db3f6d232684bde1ad8f69109c7db726b53b8317f989d8b5c5a50198ab645eb7a869e7f9 DIST libpng-1.6.19.tar.xz 941280 SHA256 311c5657f53516986c67713c946f616483e3cdb52b8b2ee26711be74e8ac35e8 SHA512 166377ce4f8abfcae0e76bafbdbe94aebef60b9a12c1820eda392e63a8ba7a9e8d7ef4840d8d4853cd487418edd2c4515a889cd9f830d4223a13315e1db4c3b8 WHIRLPOOL 8cdb5ffc7ecfafd064ae816b3bd1c7572799fc54c701e74d9c1f66ccac592fe460c1f22f1774329a8a1f177247f0fde8a22f8dc26892805a0bed64c0690967ae DIST libpng-1.6.20-apng.patch.gz 10304 SHA256 ed7bc9d03bc7390c477623e1abff42977395c75ed3e69e8308ea25bc3871774d SHA512 764bfb5a7cff395bbd6aeb6b5a53a9963f7074c41ae39dd9832d1dfd1e4eb0b6210d2cf9a1af63c8db8959ee4f0691d2fa288b0a0ecc63b61d131c7a708b38a4 WHIRLPOOL 8673db8f8b47704493d925d436f07822b3b92c0e251649670efe1f0db6cd4ecb9c38fd0c2d5153503c02f4afc677a25be835d12878ee0e0fbfa5a5027278e766 diff --git a/media-libs/libpng/libpng-1.6.18.ebuild b/media-libs/libpng/libpng-1.6.18.ebuild deleted file mode 100644 index 8818a93..0000000 --- a/media-libs/libpng/libpng-1.6.18.ebuild +++ /dev/null @@ -1,43 +0,0 @@ -# Copyright 1999-2015 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Id$ - -EAPI=5 - -inherit eutils libtool multilib-minimal - -DESCRIPTION="Portable Network Graphics library" -HOMEPAGE="http://www.libpng.org/"; -SRC_URI="mirror://sourceforge/${PN}/${P}.tar.xz - apng? ( mirror://sourceforge/apng/${P}-apng.patch.gz )" - -LICENSE="libpng" -SLOT="0/16" -KEYWORDS="alpha amd64 arm ~arm64 hppa ia64 ~m68k ~mips ppc ppc64 ~s390 ~sh sparc x86 ~ppc-aix ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~x64-freebsd ~x86-freebsd ~x86-interix ~amd64-linux ~arm-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~m68k-mint ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris ~x86-winnt" -IUSE="apng neon static-libs" - -RDEPEND=">=sys-libs/zlib-1.2.8-r1:=[${MULTILIB_USEDEP}] - abi_x86_32? ( !<=app-emulation/emul-linux-x86-baselibs-20130224-r1 - !app-emulation/emul-linux-x86-baselibs[-abi_x86_32(-)] )" -DEPEND="${RDEPEND} - app-arch/xz-utils" - -src_prepare() { - if use apng; then - epatch "${WORKDIR}"/${PN}-*-apng.patch - # Don't execute symbols check with apng patch wrt #378111 - sed -i -e '/^check/s:scripts/symbols.chk::' Makefile.in || die - fi - elibtoolize -} - -multilib_src_configure() { - ECONF_SOURCE="${S}" econf \ - $(use_enable static-libs static) \ - --enable-arm-neon=$(usex neon) -} - -multilib_src_install_all() { - dodoc ANNOUNCE CHANGES libpng-manual.txt README TODO - prune_libtool_files --all -}
