media-libs/jasper: Cleanup vulnerable versions for CVE-2014-{8137,8138}, #533744

Package-Manager: portage-2.2.15/cvs/Linux x86_64
Manifest-Sign-Key: 0xB9D4F231BD1558AB!

diff --git a/media-libs/jasper/ChangeLog b/media-libs/jasper/ChangeLog
index a07870a47e97bd1431c9ad7dfc542ff86767fb35..3e94d14b0fdfcfc3abb33ee3328a6111f978fd8d 100644 (file)
--- a/media-libs/jasper/ChangeLog
+++ b/media-libs/jasper/ChangeLog
@@ -1,6 +1,9 @@
 # ChangeLog for media-libs/jasper
 # Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/media-libs/jasper/ChangeLog,v 1.114 2015/01/16 08:07:49 ago Exp $
+# $Header: /var/cvsroot/gentoo-x86/media-libs/jasper/ChangeLog,v 1.115 2015/01/16 08:21:27 jlec Exp $
+
+  16 Jan 2015; Justin Lecher <jlec@gentoo.org> -jasper-1.900.1-r7.ebuild:
+  Cleanup vulnerable versions for CVE-2014-{8137,8138}, #533744
 
   16 Jan 2015; Agostino Sarubbo <ago@gentoo.org> jasper-1.900.1-r8.ebuild:
   Stable for ia64, wrt bug #533744

diff --git a/media-libs/jasper/Manifest b/media-libs/jasper/Manifest
index e5a2e286d174e2997e8f4b98c9711e373c82c154..b7c887a8cef46674cebfacd653db0d0c261f136c 100644 (file)
--- a/media-libs/jasper/Manifest
+++ b/media-libs/jasper/Manifest
@@ -1,5 +1,5 @@
 -----BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA256
+Hash: SHA512
 
 AUX CVE-2011-4516+7.patch 1000 SHA256 4c8973cd8f46aabdccfab850b9fdbda0cc44b443a7fb9d22530b3725ca8e7eef SHA512 00e4b51becb6aed5e98d5e69146232e352a75fc97b5aa1958c2d5e3e27f09a87c7488b1a2b28f98388b4c700568241493e107e7506067eb82121dcab7e09bdb4 WHIRLPOOL 664404ba7488ddd4d2f4cfd90baad0a66ebd318a5110354a98cf5454dab7b3f01c56aff33c31d8ae5fce979b99c8eb2159b3636920656dc8c571fc55620e61eb
 AUX jasper-1.701.0-GL-ac.patch 487 SHA256 f0c1794cca1fbee9f7a97f3b47b2a98250cb619526b3c7377b0958fb31b08bd7 SHA512 6f5aef3aba774308720deb5f844681c882d062b317196bdbc81499dd7f9d6fd380b849da3dc5d3b6699940c0090c23eaed43aff4e1aa28bca3e293970243afad WHIRLPOOL 09a905d0db771356976f67df8b049ef045f85062ba1f753b5f5921a8c8be3daefbe5addf2a496ef55fd68cf94a4348a4c2f9de6e84eef3b63860d51d3f95e147
@@ -10,24 +10,25 @@ AUX jasper-CVE-2014-9029.patch 1116 SHA256 a43747e7597a2a5108befd4acd31a582101a6
 AUX jasper-pkgconfig.patch 1691 SHA256 325003c739023264f368db2ce30598038706f45a8ec8a5a1f81fa855496e0ed1 SHA512 3cb1fe20b34e46c2d04f17eac6e1831d226368e4a7037be8324eb469b0217e1ad0520bb9d321a0f7c510828ca8505c4c42d4c54045606d0e9f2dad81c8ee21eb WHIRLPOOL 13e97b718827a712a4ee65162e6adafec1672fd9f96e8d773124b91e43c4571d5ab0975802fbf44d10fa2d4f9a895ff1fbd6adeaf817c7e70cfa08198c9425cf
 DIST jasper-1.900.1-fixes-20120611.patch.bz2 26303 SHA256 8727c94843f141c311be54eed97eca18f96542f52b991df6f7d4f005bad2ec59 SHA512 36ec1735a89008fa6be16698f78ca5ec52d4ef34f10653ba3bf081c665c4e2d747cdbd7bfc0d56859ad4dc0fac166cf08248336d25d3ba8e7feb57e65d5c5ef6 WHIRLPOOL 341639dc208c44eefb18d14b16bc74591989e4ec0bf6426bee1ed161f1c997a23dad487ac821f2bf8e1ae16ae74d6174dce39a913b44b4e24628a7a1510395a7
 DIST jasper-1.900.1.zip 1415752 SHA256 6b905a9c2aca2e275544212666eefc4eb44d95d0a57e4305457b407fe63f9494 SHA512 e3a3c803de848b50482f5bd693b1945197c6999285226c45b671855734d7bb2611fbe6f28cd8ba9c56a4ea59417795eba42d72516c9fec93b8fbaa21b8210cb6 WHIRLPOOL cd53901537bb8d32706e82326bf01f7f960af5172e2da738d1fcc9c5a4087829210a177d3df96617cf289e5db8ec97e06aa6cd60ada3b887db65418b90e9a86b
-EBUILD jasper-1.900.1-r7.ebuild 1520 SHA256 cd0525c99b1858368b55e65c473ac462cd9a72be1d4f01caf9f4c26c5c7b6bda SHA512 11ae0d94b763106275d4ba29157ff237cd758fc149c2f5dac46fa338364154c6ef200f3d2f15670f12574fdf7ec91b253e699a9f09945ad4491f26f045d55a2d WHIRLPOOL bbda3ea0765d09cb17ea1e38f49697751d07ba5acc0627a2513a04b6a44857b4cd6c57a10a8f7bf4ff96d573f19ed93d1ecbe6975b60c3bb0257cd998d20890c
 EBUILD jasper-1.900.1-r8.ebuild 1602 SHA256 4f23a4e199b74223b750b1832006b4b64095412fdf3b04f548a36ec11bbbd0d5 SHA512 6b2296873dfe427835cbb0eaecfdebc908b9f794235f4a5002883225a8fd3c64a80693b6c426d38599a95d38ddfa9dff459715353dc912033e31fbfbde79948b WHIRLPOOL 45be1fdf03b9c68bfb176449c161da4abcd53f31ca7af8b0bb0ac12167ecac5ec6709ba99d90db207f6a8d550a0b01784c88fbf34e8728a5345ba8560b18b615
-MISC ChangeLog 14137 SHA256 60ac14f75614903b2610ad5b9cd36ae5c16c8d5285a37882e14a9298ba78df61 SHA512 25d229ccca9ebda195688442f421958023b291c577a9f6e2bdca4427bd7d0e5a1cd142fa524da5674b00ac420d46c3b19c0d0b0e039f06f576b9570d6b13dc0d WHIRLPOOL c7df4d4d66bdd1406f887d3c422682ec425319ef7d3de832c130fc81780adefa028e348e60c5774587b1612325ef7ffa03d3f8d4b9683938a91d1f63c0d6d6cc
+MISC ChangeLog 14277 SHA256 11f8d80ccc2dd4834edaafbe0580c4bcfe352ce49345b434a34e642255eaaf15 SHA512 d9cec041ca08298e8270a7df4fe31b26c8d9c8775171ad5b00b4cf7bf497d475ecf3fca24880a408b29f79085835a34632f05e0d116ca82c42cae1cfca7d865e WHIRLPOOL eb0b291696fbece49b07a0486afe4c3650333a67a32ff2932e2b6d43791b4681f79c699a7f17322545063e22495815fe2ae2ffda6f9c854210fb6baf6ac74ded
 MISC metadata.xml 158 SHA256 dae7918daac89b300804812d32584889aa1c4e8b9edeced06006900494457a6d SHA512 e4901a5df84502b46aa85ec01804ce680332cebe6148e4a9c8201a38935ee0d4a753bcdb3f18765b06019926a05bf099c0ed61395aa98211610ab7fdb8d7f895 WHIRLPOOL 2f12466ef66cc7b89ec428cd4b498b20f12ca6dbb219f180ac12985dfc4195882ea95809797828a720fe69a0e560d12de9c271f8aacaa06fba09c9c1ccd589e5
 -----BEGIN PGP SIGNATURE-----
-Version: GnuPG v2
+Version: GnuPG v2.0
 
-iQIcBAEBCAAGBQJUuMbXAAoJELp701BxlEWfow0QAMfWL9Zn8GLud8Lg2z88CGpX
-2p6U3d7af70ztPPbMdnC8wiNTXhBQZiZBTMGFzyiwJgWfNNvy/BSm36zQWWx1yRm
-zAoVvj8jwnjgky8Z3Uj/BCR7ZS5hR7s/vVf1piElgV0pPuD61CntwzYiVwXmLP8o
-cEFFwtXbBF/lLPCdx2ugyO7Uneg2see3jB9ZPKQ0B8p8kN1swsayX6enjApp8U8n
-GBrMI5jznX/+c0mPFe+xqPFBFTbCsik86CP/ZesrKQedyqS88tKUR8ju+OBc28lX
-Y0IzjuozUwsj/6KPgFnRlH1yqHFyqzyGmqnvWSW+9GQ85uEtkK8MLFiqLfuSxedp
-CSTU7Q+ORNDA50M98paPyxIJ9DXg5+rJKBWkmyBcsODNvKSrl09mle54J6KR2ayr
-iCJMnE8jzH4UisO5fv4qn/0KtheT2rc8ZqgUvBvmJwZZH60vweAbF67cfX90iOpA
-6viU88DCF2zjpNxd82lqQtwtTygq6G0NxaaEpvWTY65ssJNajVFolkph6iveyjEN
-o10Kx6zo96W+t7HEnsmrMx+8IerqBDRtTLKC7TZ5fr1lrHIpmYFpQW5A54XnDwIs
-eJhHPIibAcskkYuyPbtFRwRqV+qtIh8Ew/iDTCYh+ua7St59JYogcivMlnVXm7dZ
-Px0CBBYF3uJGXp0G+qxM
-=diaR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+=K57Z
 -----END PGP SIGNATURE-----

diff --git a/media-libs/jasper/jasper-1.900.1-r7.ebuild b/media-libs/jasper/jasper-1.900.1-r7.ebuild
deleted file mode 100644 (file)
index 2025eee..0000000
--- a/media-libs/jasper/jasper-1.900.1-r7.ebuild
+++ /dev/null
@@ -1,50 +0,0 @@
-# Copyright 1999-2014 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/media-libs/jasper/jasper-1.900.1-r7.ebuild,v 1.10 2014/12/26 09:18:04 ago Exp $
-
-EAPI=5
-
-# outdated './configure': breaks in 'USE=opengl ABI_X86="32 64"' case:
-#  uses /usr/lib64 for 32-bit ABI.
-AUTOTOOLS_AUTORECONF=yes
-
-inherit autotools-multilib
-
-DESCRIPTION="software-based implementation of the codec specified in the JPEG-2000 Part-1 standard"
-HOMEPAGE="http://www.ece.uvic.ca/~mdadams/jasper/"
-SRC_URI="
-       http://www.ece.uvic.ca/~mdadams/${PN}/software/${P}.zip
-       mirror://gentoo/${P}-fixes-20120611.patch.bz2"
-
-LICENSE="JasPer2.0"
-SLOT="0"
-KEYWORDS="alpha amd64 arm hppa ia64 ~mips ppc ppc64 ~s390 ~sh sparc x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~amd64-linux ~arm-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~x64-solaris ~x86-solaris"
-IUSE="jpeg opengl static-libs"
-
-RDEPEND="
-       jpeg? ( >=virtual/jpeg-0-r2:0[${MULTILIB_USEDEP}] )
-       opengl? (
-               >=virtual/opengl-7.0-r1:0[${MULTILIB_USEDEP}]
-               >=media-libs/freeglut-2.8.1:0[${MULTILIB_USEDEP}]
-               virtual/glu
-               )"
-DEPEND="${RDEPEND}
-       app-arch/unzip"
-
-PATCHES=(
-       "${WORKDIR}"/${P}-fixes-20120611.patch
-       "${FILESDIR}"/${PN}-1.701.0-GL-ac.patch
-       "${FILESDIR}"/${PN}-1.701.0-GL.patch
-       "${FILESDIR}"/${PN}-CVE-2014-9029.patch
-       "${FILESDIR}"/${PN}-pkgconfig.patch
-       )
-
-DOCS=( NEWS README doc/. )
-
-src_configure() {
-       local myeconfargs=(
-               $(use_enable jpeg libjpeg)
-               $(use_enable opengl)
-               )
-       autotools-multilib_src_configure
-}