[gentoo-commits] repo/gentoo:master commit in: media-gfx/autotrace/
commit: cf5bf68cffd101b2d2b6efb48e8c26a3e5dfdbf6
Author: Alexis Ballier gentoo org>
AuthorDate: Sat Jul 8 17:56:01 2017 +
Commit: Alexis Ballier gentoo org>
CommitDate: Sat Jul 8 17:56:09 2017 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cf5bf68c
media-gfx/autotrace: keyword ~arm64
Package-Manager: Portage-2.3.6, Repoman-2.3.2
media-gfx/autotrace/autotrace-0.31.1-r8.ebuild | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/media-gfx/autotrace/autotrace-0.31.1-r8.ebuild
b/media-gfx/autotrace/autotrace-0.31.1-r8.ebuild
index 685183f2c27..565f13b5f92 100644
--- a/media-gfx/autotrace/autotrace-0.31.1-r8.ebuild
+++ b/media-gfx/autotrace/autotrace-0.31.1-r8.ebuild
@@ -13,7 +13,7 @@
SRC_URI="mirror://debian/pool/main/a/${PN}/${PN}_${PV}.orig.tar.gz
LICENSE="GPL-2 LGPL-2.1"
SLOT="0"
-KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~amd64-fbsd
~x86-fbsd"
+KEYWORDS="~alpha ~amd64 ~arm64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~amd64-fbsd
~x86-fbsd"
IUSE="+imagemagick static-libs"
RDEPEND="media-libs/libexif:=
[gentoo-commits] repo/gentoo:master commit in: media-gfx/autotrace/, media-gfx/autotrace/files/
commit: 2fcc7c830301a4ae876393e6ca0e1f74b7deca9f
Author: Agostino Sarubbo gentoo org>
AuthorDate: Tue Apr 4 07:24:52 2017 +
Commit: Agostino Sarubbo gentoo org>
CommitDate: Tue Apr 4 07:24:52 2017 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2fcc7c83
media-gfx/autotrace: add a patch to fix CVE-2016-7392, wrt bug #613992
Package-Manager: Portage-2.3.3, Repoman-2.3.1
Signed-off-by: Agostino Sarubbo gentoo.org>
media-gfx/autotrace/autotrace-0.31.1-r8.ebuild | 63 ++
.../files/autotrace-0.31.1-CVE-2016-7392.patch | 15 ++
2 files changed, 78 insertions(+)
diff --git a/media-gfx/autotrace/autotrace-0.31.1-r8.ebuild
b/media-gfx/autotrace/autotrace-0.31.1-r8.ebuild
new file mode 100644
index 000..685183f2c27
--- /dev/null
+++ b/media-gfx/autotrace/autotrace-0.31.1-r8.ebuild
@@ -0,0 +1,63 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=5
+inherit autotools eutils
+
+_dpatch=15
+
+DESCRIPTION="A program for converting bitmaps to vector graphics"
+HOMEPAGE="http://packages.qa.debian.org/a/autotrace.html
http://autotrace.sourceforge.net/;
+SRC_URI="mirror://debian/pool/main/a/${PN}/${PN}_${PV}.orig.tar.gz
+ mirror://debian/pool/main/a/${PN}/${PN}_${PV}-${_dpatch}.diff.gz"
+
+LICENSE="GPL-2 LGPL-2.1"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~amd64-fbsd
~x86-fbsd"
+IUSE="+imagemagick static-libs"
+
+RDEPEND="media-libs/libexif:=
+ media-libs/libpng:0=
+ >=media-libs/ming-0.4.2:=
+ >=media-gfx/pstoedit-3.50:=
+ imagemagick? ( >=media-gfx/imagemagick-6.6.2.5 )"
+DEPEND="${RDEPEND}
+ virtual/pkgconfig"
+
+DOCS=( AUTHORS ChangeLog NEWS README )
+
+src_prepare() {
+ epatch "${WORKDIR}"/${PN}_${PV}-${_dpatch}.diff
+
+ epatch \
+ "${FILESDIR}"/${P}-{m4,libpng14,pkgconfig}.patch \
+ "${FILESDIR}"/${P}-swf-output.patch \
+ "${FILESDIR}"/${P}-GetOnePixel.patch \
+ "${FILESDIR}"/${P}-libpng-1.5.patch
+
+ # Fix building on PowerPC with Altivec
+ epatch "${FILESDIR}"/${P}-bool.patch
+
+ # Addresses bug #466078
+ epatch "${FILESDIR}"/${P}-CVE-2013-1953.patch
+
+ # bug #613992
+ epatch "${FILESDIR}"/${P}-CVE-2016-7392.patch
+
+ sed -i -e 's:AM_CONFIG_HEADER:AC_CONFIG_HEADERS:' configure.in || die
#468496
+
+ eautoreconf
+}
+
+src_configure() {
+ econf \
+ $(use_enable static-libs static) \
+ $(use_with imagemagick magick) \
+ --with-ming \
+ --with-pstoedit
+}
+
+src_install() {
+ default
+ prune_libtool_files --all
+}
diff --git a/media-gfx/autotrace/files/autotrace-0.31.1-CVE-2016-7392.patch
b/media-gfx/autotrace/files/autotrace-0.31.1-CVE-2016-7392.patch
new file mode 100644
index 000..e3bb0303cb8
--- /dev/null
+++ b/media-gfx/autotrace/files/autotrace-0.31.1-CVE-2016-7392.patch
@@ -0,0 +1,15 @@
+Patch from debian to fix CVE-2016-7392
+https://blogs.gentoo.org/ago/2016/09/10/autotrace-heap-based-buffer-overflow-in-pstoedit_suffix_table_init-output-pstoedit-c/
+
+--- a/output-pstoedit.c
b/output-pstoedit.c
+@@ -84,7 +84,7 @@
+ dd_tmp = dd_start;
+ while (dd_tmp->symbolicname)
+ dd_tmp++;
+- XMALLOC(pstoedit_suffix_table, sizeof(char *) * 2 * (dd_tmp - dd_start)
+ 1);
++ XMALLOC(pstoedit_suffix_table, sizeof(char *) * (2 * (dd_tmp -
dd_start) + 1));
+
+ #if defined (OUTPUT_PSTOEDIT_DEBUG) && defined(__GNUC__)
+ fprintf(stderr, "OUTPUT PSTOEDIT BACKEND DEBUG(%s)\n", __FUNCTION__);
+
[gentoo-commits] repo/gentoo:master commit in: media-gfx/autotrace/
commit: e44a0df958aa8ea2c49c19dbc406a8d47f6d6697
Author: Markus Meier gentoo org>
AuthorDate: Sun Jul 10 09:04:16 2016 +
Commit: Markus Meier gentoo org>
CommitDate: Sun Jul 10 09:04:16 2016 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e44a0df9
media-gfx/autotrace: remove vulnerable versions for bug #466078
Package-Manager: portage-2.3.0
media-gfx/autotrace/autotrace-0.31.1-r6.ebuild | 58 --
1 file changed, 58 deletions(-)
diff --git a/media-gfx/autotrace/autotrace-0.31.1-r6.ebuild
b/media-gfx/autotrace/autotrace-0.31.1-r6.ebuild
deleted file mode 100644
index 006e80d..000
--- a/media-gfx/autotrace/autotrace-0.31.1-r6.ebuild
+++ /dev/null
@@ -1,58 +0,0 @@
-# Copyright 1999-2013 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Id$
-
-EAPI=5
-inherit autotools eutils
-
-_dpatch=15
-
-DESCRIPTION="A program for converting bitmaps to vector graphics"
-HOMEPAGE="http://packages.qa.debian.org/a/autotrace.html
http://autotrace.sourceforge.net/;
-SRC_URI="mirror://debian/pool/main/a/${PN}/${PN}_${PV}.orig.tar.gz
- mirror://debian/pool/main/a/${PN}/${PN}_${PV}-${_dpatch}.diff.gz"
-
-LICENSE="GPL-2 LGPL-2.1"
-SLOT="0"
-KEYWORDS="alpha amd64 hppa ia64 ppc ppc64 sparc x86 ~amd64-fbsd ~x86-fbsd"
-IUSE="+imagemagick static-libs"
-
-RDEPEND="media-libs/libexif:=
- media-libs/libpng:0=
- >=media-libs/ming-0.4.2:=
- >=media-gfx/pstoedit-3.50:=
- imagemagick? ( >=media-gfx/imagemagick-6.6.2.5 )"
-DEPEND="${RDEPEND}
- virtual/pkgconfig"
-
-DOCS=( AUTHORS ChangeLog NEWS README )
-
-src_prepare() {
- epatch "${WORKDIR}"/${PN}_${PV}-${_dpatch}.diff
-
- epatch \
- "${FILESDIR}"/${P}-{m4,libpng14,pkgconfig}.patch \
- "${FILESDIR}"/${P}-swf-output.patch \
- "${FILESDIR}"/${P}-GetOnePixel.patch \
- "${FILESDIR}"/${P}-libpng-1.5.patch
-
- # Fix building on PowerPC with Altivec
- epatch "${FILESDIR}"/${P}-bool.patch
-
- sed -i -e 's:AM_CONFIG_HEADER:AC_CONFIG_HEADERS:' configure.in || die
#468496
-
- eautoreconf
-}
-
-src_configure() {
- econf \
- $(use_enable static-libs static) \
- $(use_with imagemagick magick) \
- --with-ming \
- --with-pstoedit
-}
-
-src_install() {
- default
- prune_libtool_files --all
-}
[gentoo-commits] repo/gentoo:master commit in: media-gfx/autotrace/
commit: 4f7cb58e4459f7b004806f3ffda17ced0b12f293
Author: Agostino Sarubbo gentoo org>
AuthorDate: Fri Jul 8 12:00:28 2016 +
Commit: Agostino Sarubbo gentoo org>
CommitDate: Fri Jul 8 12:00:28 2016 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4f7cb58e
media-gfx/autotrace: ia64 stable wrt bug #466078
Package-Manager: portage-2.2.28
RepoMan-Options: --include-arches="ia64"
Signed-off-by: Agostino Sarubbo gentoo.org>
media-gfx/autotrace/autotrace-0.31.1-r7.ebuild | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
b/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
index c6b85d0..05690c8 100644
--- a/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
+++ b/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
@@ -14,7 +14,7 @@
SRC_URI="mirror://debian/pool/main/a/${PN}/${PN}_${PV}.orig.tar.gz
LICENSE="GPL-2 LGPL-2.1"
SLOT="0"
-KEYWORDS="alpha amd64 hppa ~ia64 ppc ppc64 sparc x86 ~amd64-fbsd ~x86-fbsd"
+KEYWORDS="alpha amd64 hppa ia64 ppc ppc64 sparc x86 ~amd64-fbsd ~x86-fbsd"
IUSE="+imagemagick static-libs"
RDEPEND="media-libs/libexif:=
[gentoo-commits] repo/gentoo:master commit in: media-gfx/autotrace/
commit: fc6378b4ca92c4a68f9751053c5939f75b8cbe88
Author: Tobias Klausmann gentoo org>
AuthorDate: Mon Jul 4 11:20:19 2016 +
Commit: Tobias Klausmann gentoo org>
CommitDate: Mon Jul 4 11:20:19 2016 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=fc6378b4
media-gfx/autotrace-0.31.1-r7: add alpha keyword
Gentoo-Bug: 466078
Package-Manager: portage-2.3.0
media-gfx/autotrace/autotrace-0.31.1-r7.ebuild | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
b/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
index 6bacf9a..a6449dc 100644
--- a/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
+++ b/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
@@ -14,7 +14,7 @@
SRC_URI="mirror://debian/pool/main/a/${PN}/${PN}_${PV}.orig.tar.gz
LICENSE="GPL-2 LGPL-2.1"
SLOT="0"
-KEYWORDS="~alpha amd64 hppa ~ia64 ~ppc ppc64 ~sparc x86 ~amd64-fbsd ~x86-fbsd"
+KEYWORDS="alpha amd64 hppa ~ia64 ~ppc ppc64 ~sparc x86 ~amd64-fbsd ~x86-fbsd"
IUSE="+imagemagick static-libs"
RDEPEND="media-libs/libexif:=
[gentoo-commits] repo/gentoo:master commit in: media-gfx/autotrace/
commit: f04306bcb89046d004cb27951747779e57113e0e
Author: Jeroen Roovers gentoo org>
AuthorDate: Sun Jul 3 10:52:35 2016 +
Commit: Jeroen Roovers gentoo org>
CommitDate: Sun Jul 3 10:53:04 2016 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f04306bc
media-gfx/autotrace: Stable for PPC64 (bug #466078).
Package-Manager: portage-2.3.0
RepoMan-Options: --ignore-arches
media-gfx/autotrace/autotrace-0.31.1-r7.ebuild | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
b/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
index 0a453e2..6bacf9a 100644
--- a/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
+++ b/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
@@ -14,7 +14,7 @@
SRC_URI="mirror://debian/pool/main/a/${PN}/${PN}_${PV}.orig.tar.gz
LICENSE="GPL-2 LGPL-2.1"
SLOT="0"
-KEYWORDS="~alpha amd64 hppa ~ia64 ~ppc ~ppc64 ~sparc x86 ~amd64-fbsd ~x86-fbsd"
+KEYWORDS="~alpha amd64 hppa ~ia64 ~ppc ppc64 ~sparc x86 ~amd64-fbsd ~x86-fbsd"
IUSE="+imagemagick static-libs"
RDEPEND="media-libs/libexif:=
[gentoo-commits] repo/gentoo:master commit in: media-gfx/autotrace/
commit: 1c086bbd344d23f2d6223f15f24e8ca6daa32386
Author: Jeroen Roovers gentoo org>
AuthorDate: Sun Jul 3 10:02:12 2016 +
Commit: Jeroen Roovers gentoo org>
CommitDate: Sun Jul 3 10:02:12 2016 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1c086bbd
media-gfx/autotrace: Stable for HPPA (bug #466078).
Package-Manager: portage-2.3.0
RepoMan-Options: --ignore-arches
media-gfx/autotrace/autotrace-0.31.1-r7.ebuild | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
b/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
index ddb81d2..0a453e2 100644
--- a/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
+++ b/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
@@ -14,7 +14,7 @@
SRC_URI="mirror://debian/pool/main/a/${PN}/${PN}_${PV}.orig.tar.gz
LICENSE="GPL-2 LGPL-2.1"
SLOT="0"
-KEYWORDS="~alpha amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc x86 ~amd64-fbsd
~x86-fbsd"
+KEYWORDS="~alpha amd64 hppa ~ia64 ~ppc ~ppc64 ~sparc x86 ~amd64-fbsd ~x86-fbsd"
IUSE="+imagemagick static-libs"
RDEPEND="media-libs/libexif:=
[gentoo-commits] repo/gentoo:master commit in: media-gfx/autotrace/
commit: 050357f3a9363c0798633a631742b525f8a1806d
Author: Agostino Sarubbo gentoo org>
AuthorDate: Sat Jul 2 12:42:42 2016 +
Commit: Agostino Sarubbo gentoo org>
CommitDate: Sat Jul 2 12:42:48 2016 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=050357f3
media-gfx/autotrace: x86 stable wrt bug #466078
Package-Manager: portage-2.2.28
RepoMan-Options: --include-arches="x86"
Signed-off-by: Agostino Sarubbo gentoo.org>
media-gfx/autotrace/autotrace-0.31.1-r7.ebuild | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
b/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
index a90d876..ddb81d2 100644
--- a/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
+++ b/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
@@ -14,7 +14,7 @@
SRC_URI="mirror://debian/pool/main/a/${PN}/${PN}_${PV}.orig.tar.gz
LICENSE="GPL-2 LGPL-2.1"
SLOT="0"
-KEYWORDS="~alpha amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~amd64-fbsd
~x86-fbsd"
+KEYWORDS="~alpha amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc x86 ~amd64-fbsd
~x86-fbsd"
IUSE="+imagemagick static-libs"
RDEPEND="media-libs/libexif:=
[gentoo-commits] repo/gentoo:master commit in: media-gfx/autotrace/
commit: 311a8b76f7863c7a027f3d8c5f2a1a9ced238987
Author: Agostino Sarubbo gentoo org>
AuthorDate: Sat Jul 2 12:42:00 2016 +
Commit: Agostino Sarubbo gentoo org>
CommitDate: Sat Jul 2 12:42:00 2016 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=311a8b76
media-gfx/autotrace: amd64 stable wrt bug #466078
Package-Manager: portage-2.2.28
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo gentoo.org>
media-gfx/autotrace/autotrace-0.31.1-r7.ebuild | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
b/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
index f24dea4..a90d876 100644
--- a/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
+++ b/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
@@ -14,7 +14,7 @@
SRC_URI="mirror://debian/pool/main/a/${PN}/${PN}_${PV}.orig.tar.gz
LICENSE="GPL-2 LGPL-2.1"
SLOT="0"
-KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~amd64-fbsd
~x86-fbsd"
+KEYWORDS="~alpha amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~amd64-fbsd
~x86-fbsd"
IUSE="+imagemagick static-libs"
RDEPEND="media-libs/libexif:=
[gentoo-commits] repo/gentoo:master commit in: media-gfx/autotrace/files/, media-gfx/autotrace/
commit: b6d1c95e6a0a3ea6ae4d8b397845120e23e0f67b
Author: Aaron Bauman gentoo org>
AuthorDate: Sat Jul 2 03:04:11 2016 +
Commit: Aaron Bauman gentoo org>
CommitDate: Sat Jul 2 03:04:11 2016 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b6d1c95e
media-gfx/autotrace: add patch for CVE-2013-1953 per security bug #466078
media-gfx/autotrace/autotrace-0.31.1-r7.ebuild | 61 ++
.../files/autotrace-0.31.1-CVE-2013-1953.patch | 12 +
2 files changed, 73 insertions(+)
diff --git a/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
b/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
new file mode 100644
index 000..f24dea4
--- /dev/null
+++ b/media-gfx/autotrace/autotrace-0.31.1-r7.ebuild
@@ -0,0 +1,61 @@
+# Copyright 1999-2016 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI=5
+inherit autotools eutils
+
+_dpatch=15
+
+DESCRIPTION="A program for converting bitmaps to vector graphics"
+HOMEPAGE="http://packages.qa.debian.org/a/autotrace.html
http://autotrace.sourceforge.net/;
+SRC_URI="mirror://debian/pool/main/a/${PN}/${PN}_${PV}.orig.tar.gz
+ mirror://debian/pool/main/a/${PN}/${PN}_${PV}-${_dpatch}.diff.gz"
+
+LICENSE="GPL-2 LGPL-2.1"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~hppa ~ia64 ~ppc ~ppc64 ~sparc ~x86 ~amd64-fbsd
~x86-fbsd"
+IUSE="+imagemagick static-libs"
+
+RDEPEND="media-libs/libexif:=
+ media-libs/libpng:0=
+ >=media-libs/ming-0.4.2:=
+ >=media-gfx/pstoedit-3.50:=
+ imagemagick? ( >=media-gfx/imagemagick-6.6.2.5 )"
+DEPEND="${RDEPEND}
+ virtual/pkgconfig"
+
+DOCS=( AUTHORS ChangeLog NEWS README )
+
+src_prepare() {
+ epatch "${WORKDIR}"/${PN}_${PV}-${_dpatch}.diff
+
+ epatch \
+ "${FILESDIR}"/${P}-{m4,libpng14,pkgconfig}.patch \
+ "${FILESDIR}"/${P}-swf-output.patch \
+ "${FILESDIR}"/${P}-GetOnePixel.patch \
+ "${FILESDIR}"/${P}-libpng-1.5.patch
+
+ # Fix building on PowerPC with Altivec
+ epatch "${FILESDIR}"/${P}-bool.patch
+
+ # Addresses bug #466078
+ epatch "${FILESDIR}"/${P}-CVE-2013-1953.patch
+
+ sed -i -e 's:AM_CONFIG_HEADER:AC_CONFIG_HEADERS:' configure.in || die
#468496
+
+ eautoreconf
+}
+
+src_configure() {
+ econf \
+ $(use_enable static-libs static) \
+ $(use_with imagemagick magick) \
+ --with-ming \
+ --with-pstoedit
+}
+
+src_install() {
+ default
+ prune_libtool_files --all
+}
diff --git a/media-gfx/autotrace/files/autotrace-0.31.1-CVE-2013-1953.patch
b/media-gfx/autotrace/files/autotrace-0.31.1-CVE-2013-1953.patch
new file mode 100644
index 000..38d7eae
--- /dev/null
+++ b/media-gfx/autotrace/files/autotrace-0.31.1-CVE-2013-1953.patch
@@ -0,0 +1,12 @@
+diff -up autotrace-0.31.1/input-bmp.c.orig autotrace-0.31.1/input-bmp.c
+--- autotrace-0.31.1/input-bmp.c.orig 2002-10-10 22:44:08.0 +0200
autotrace-0.31.1/input-bmp.c 2013-06-28 10:24:58.336056959 +0200
+@@ -166,7 +166,7 @@ input_bmp_reader (at_string filename,
+ /* 36 */
+ Maps = 4;
+ }
+- else if (Bitmap_File_Head.biSize <= 64) /* Probably OS/2 2.x */
++ else if (Bitmap_File_Head.biSize >= 40 && Bitmap_File_Head.biSize <= 64) /*
Probably OS/2 2.x */
+ {
+ if (!ReadOK (fd, buffer, Bitmap_File_Head.biSize - 4))
+ {
