jlec 15/01/04 18:18:17 Modified: ChangeLog Added: jasper-1.900.1-r8.ebuild Log: media-libs/jasper: Import fixes for CVE-2014-8137/8 from fedora, #533744 (Portage version: 2.2.15/cvs/Linux x86_64, signed Manifest commit with key B9D4F231BD1558AB!)
Revision Changes Path 1.105 media-libs/jasper/ChangeLog file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/media-libs/jasper/ChangeLog?rev=1.105&view=markup plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/media-libs/jasper/ChangeLog?rev=1.105&content-type=text/plain diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/media-libs/jasper/ChangeLog?r1=1.104&r2=1.105 Index: ChangeLog =================================================================== RCS file: /var/cvsroot/gentoo-x86/media-libs/jasper/ChangeLog,v retrieving revision 1.104 retrieving revision 1.105 diff -u -r1.104 -r1.105 --- ChangeLog 26 Dec 2014 10:40:05 -0000 1.104 +++ ChangeLog 4 Jan 2015 18:18:17 -0000 1.105 @@ -1,6 +1,12 @@ # ChangeLog for media-libs/jasper -# Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/media-libs/jasper/ChangeLog,v 1.104 2014/12/26 10:40:05 jlec Exp $ +# Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2 +# $Header: /var/cvsroot/gentoo-x86/media-libs/jasper/ChangeLog,v 1.105 2015/01/04 18:18:17 jlec Exp $ + +*jasper-1.900.1-r8 (04 Jan 2015) + + 04 Jan 2015; Justin Lecher <[email protected]> +jasper-1.900.1-r8.ebuild, + +files/jasper-CVE-2014-8137.patch, +files/jasper-CVE-2014-8138.patch: + Import fixes for CVE-2014-8137/8 from fedora, #533744 26 Dec 2014; Justin Lecher <[email protected]> -jasper-1.900.1-r6.ebuild: Drop vulnerable version 1.1 media-libs/jasper/jasper-1.900.1-r8.ebuild file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/media-libs/jasper/jasper-1.900.1-r8.ebuild?rev=1.1&view=markup plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/media-libs/jasper/jasper-1.900.1-r8.ebuild?rev=1.1&content-type=text/plain Index: jasper-1.900.1-r8.ebuild =================================================================== # Copyright 1999-2015 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 # $Header: /var/cvsroot/gentoo-x86/media-libs/jasper/jasper-1.900.1-r8.ebuild,v 1.1 2015/01/04 18:18:17 jlec Exp $ EAPI=5 # outdated './configure': breaks in 'USE=opengl ABI_X86="32 64"' case: # uses /usr/lib64 for 32-bit ABI. AUTOTOOLS_AUTORECONF=yes inherit autotools-multilib DESCRIPTION="software-based implementation of the codec specified in the JPEG-2000 Part-1 standard" HOMEPAGE="http://www.ece.uvic.ca/~mdadams/jasper/"; SRC_URI=" http://www.ece.uvic.ca/~mdadams/${PN}/software/${P}.zip mirror://gentoo/${P}-fixes-20120611.patch.bz2" LICENSE="JasPer2.0" SLOT="0" KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~amd64-linux ~arm-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~x64-solaris ~x86-solaris" IUSE="jpeg opengl static-libs" RDEPEND=" jpeg? ( >=virtual/jpeg-0-r2:0[${MULTILIB_USEDEP}] ) opengl? ( >=virtual/opengl-7.0-r1:0[${MULTILIB_USEDEP}] >=media-libs/freeglut-2.8.1:0[${MULTILIB_USEDEP}] virtual/glu )" DEPEND="${RDEPEND} app-arch/unzip" PATCHES=( "${WORKDIR}"/${P}-fixes-20120611.patch "${FILESDIR}"/${PN}-1.701.0-GL-ac.patch "${FILESDIR}"/${PN}-1.701.0-GL.patch "${FILESDIR}"/${PN}-CVE-2014-9029.patch "${FILESDIR}"/${PN}-CVE-2014-8137.patch "${FILESDIR}"/${PN}-CVE-2014-8138.patch "${FILESDIR}"/${PN}-pkgconfig.patch ) DOCS=( NEWS README doc/. ) src_configure() { local myeconfargs=( $(use_enable jpeg libjpeg) $(use_enable opengl) ) autotools-multilib_src_configure }
