From 7aeed1d1b2d2626852acfe93d5e121dc7b8ab62d Mon Sep 17 00:00:00 2001 From: Justin Lecher Date: Fri, 16 Jan 2015 08:21:28 +0000 Subject: [PATCH] media-libs/jasper: Cleanup vulnerable versions for CVE-2014-{8137,8138}, #533744 Package-Manager: portage-2.2.15/cvs/Linux x86_64 Manifest-Sign-Key: 0xB9D4F231BD1558AB! --- media-libs/jasper/ChangeLog | 5 ++- media-libs/jasper/Manifest | 35 +++++++-------- media-libs/jasper/jasper-1.900.1-r7.ebuild | 50 ---------------------- 3 files changed, 22 insertions(+), 68 deletions(-) delete mode 100644 media-libs/jasper/jasper-1.900.1-r7.ebuild diff --git a/media-libs/jasper/ChangeLog b/media-libs/jasper/ChangeLog index a07870a47e97..3e94d14b0fdf 100644 --- a/media-libs/jasper/ChangeLog +++ b/media-libs/jasper/ChangeLog @@ -1,6 +1,9 @@ # ChangeLog for media-libs/jasper # Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/media-libs/jasper/ChangeLog,v 1.114 2015/01/16 08:07:49 ago Exp $ +# $Header: /var/cvsroot/gentoo-x86/media-libs/jasper/ChangeLog,v 1.115 2015/01/16 08:21:27 jlec Exp $ + + 16 Jan 2015; Justin Lecher -jasper-1.900.1-r7.ebuild: + Cleanup vulnerable versions for CVE-2014-{8137,8138}, #533744 16 Jan 2015; Agostino Sarubbo jasper-1.900.1-r8.ebuild: Stable for ia64, wrt bug #533744 diff --git a/media-libs/jasper/Manifest b/media-libs/jasper/Manifest index e5a2e286d174..b7c887a8cef4 100644 --- a/media-libs/jasper/Manifest +++ b/media-libs/jasper/Manifest @@ -1,5 +1,5 @@ -----BEGIN PGP SIGNED MESSAGE----- -Hash: SHA256 +Hash: SHA512 AUX CVE-2011-4516+7.patch 1000 SHA256 4c8973cd8f46aabdccfab850b9fdbda0cc44b443a7fb9d22530b3725ca8e7eef SHA512 00e4b51becb6aed5e98d5e69146232e352a75fc97b5aa1958c2d5e3e27f09a87c7488b1a2b28f98388b4c700568241493e107e7506067eb82121dcab7e09bdb4 WHIRLPOOL 664404ba7488ddd4d2f4cfd90baad0a66ebd318a5110354a98cf5454dab7b3f01c56aff33c31d8ae5fce979b99c8eb2159b3636920656dc8c571fc55620e61eb AUX jasper-1.701.0-GL-ac.patch 487 SHA256 f0c1794cca1fbee9f7a97f3b47b2a98250cb619526b3c7377b0958fb31b08bd7 SHA512 6f5aef3aba774308720deb5f844681c882d062b317196bdbc81499dd7f9d6fd380b849da3dc5d3b6699940c0090c23eaed43aff4e1aa28bca3e293970243afad WHIRLPOOL 09a905d0db771356976f67df8b049ef045f85062ba1f753b5f5921a8c8be3daefbe5addf2a496ef55fd68cf94a4348a4c2f9de6e84eef3b63860d51d3f95e147 @@ -10,24 +10,25 @@ AUX jasper-CVE-2014-9029.patch 1116 SHA256 a43747e7597a2a5108befd4acd31a582101a6 AUX jasper-pkgconfig.patch 1691 SHA256 325003c739023264f368db2ce30598038706f45a8ec8a5a1f81fa855496e0ed1 SHA512 3cb1fe20b34e46c2d04f17eac6e1831d226368e4a7037be8324eb469b0217e1ad0520bb9d321a0f7c510828ca8505c4c42d4c54045606d0e9f2dad81c8ee21eb WHIRLPOOL 13e97b718827a712a4ee65162e6adafec1672fd9f96e8d773124b91e43c4571d5ab0975802fbf44d10fa2d4f9a895ff1fbd6adeaf817c7e70cfa08198c9425cf DIST jasper-1.900.1-fixes-20120611.patch.bz2 26303 SHA256 8727c94843f141c311be54eed97eca18f96542f52b991df6f7d4f005bad2ec59 SHA512 36ec1735a89008fa6be16698f78ca5ec52d4ef34f10653ba3bf081c665c4e2d747cdbd7bfc0d56859ad4dc0fac166cf08248336d25d3ba8e7feb57e65d5c5ef6 WHIRLPOOL 341639dc208c44eefb18d14b16bc74591989e4ec0bf6426bee1ed161f1c997a23dad487ac821f2bf8e1ae16ae74d6174dce39a913b44b4e24628a7a1510395a7 DIST jasper-1.900.1.zip 1415752 SHA256 6b905a9c2aca2e275544212666eefc4eb44d95d0a57e4305457b407fe63f9494 SHA512 e3a3c803de848b50482f5bd693b1945197c6999285226c45b671855734d7bb2611fbe6f28cd8ba9c56a4ea59417795eba42d72516c9fec93b8fbaa21b8210cb6 WHIRLPOOL cd53901537bb8d32706e82326bf01f7f960af5172e2da738d1fcc9c5a4087829210a177d3df96617cf289e5db8ec97e06aa6cd60ada3b887db65418b90e9a86b -EBUILD jasper-1.900.1-r7.ebuild 1520 SHA256 cd0525c99b1858368b55e65c473ac462cd9a72be1d4f01caf9f4c26c5c7b6bda SHA512 11ae0d94b763106275d4ba29157ff237cd758fc149c2f5dac46fa338364154c6ef200f3d2f15670f12574fdf7ec91b253e699a9f09945ad4491f26f045d55a2d WHIRLPOOL bbda3ea0765d09cb17ea1e38f49697751d07ba5acc0627a2513a04b6a44857b4cd6c57a10a8f7bf4ff96d573f19ed93d1ecbe6975b60c3bb0257cd998d20890c EBUILD jasper-1.900.1-r8.ebuild 1602 SHA256 4f23a4e199b74223b750b1832006b4b64095412fdf3b04f548a36ec11bbbd0d5 SHA512 6b2296873dfe427835cbb0eaecfdebc908b9f794235f4a5002883225a8fd3c64a80693b6c426d38599a95d38ddfa9dff459715353dc912033e31fbfbde79948b WHIRLPOOL 45be1fdf03b9c68bfb176449c161da4abcd53f31ca7af8b0bb0ac12167ecac5ec6709ba99d90db207f6a8d550a0b01784c88fbf34e8728a5345ba8560b18b615 -MISC ChangeLog 14137 SHA256 60ac14f75614903b2610ad5b9cd36ae5c16c8d5285a37882e14a9298ba78df61 SHA512 25d229ccca9ebda195688442f421958023b291c577a9f6e2bdca4427bd7d0e5a1cd142fa524da5674b00ac420d46c3b19c0d0b0e039f06f576b9570d6b13dc0d WHIRLPOOL c7df4d4d66bdd1406f887d3c422682ec425319ef7d3de832c130fc81780adefa028e348e60c5774587b1612325ef7ffa03d3f8d4b9683938a91d1f63c0d6d6cc +MISC ChangeLog 14277 SHA256 11f8d80ccc2dd4834edaafbe0580c4bcfe352ce49345b434a34e642255eaaf15 SHA512 d9cec041ca08298e8270a7df4fe31b26c8d9c8775171ad5b00b4cf7bf497d475ecf3fca24880a408b29f79085835a34632f05e0d116ca82c42cae1cfca7d865e WHIRLPOOL eb0b291696fbece49b07a0486afe4c3650333a67a32ff2932e2b6d43791b4681f79c699a7f17322545063e22495815fe2ae2ffda6f9c854210fb6baf6ac74ded MISC metadata.xml 158 SHA256 dae7918daac89b300804812d32584889aa1c4e8b9edeced06006900494457a6d SHA512 e4901a5df84502b46aa85ec01804ce680332cebe6148e4a9c8201a38935ee0d4a753bcdb3f18765b06019926a05bf099c0ed61395aa98211610ab7fdb8d7f895 WHIRLPOOL 2f12466ef66cc7b89ec428cd4b498b20f12ca6dbb219f180ac12985dfc4195882ea95809797828a720fe69a0e560d12de9c271f8aacaa06fba09c9c1ccd589e5 -----BEGIN PGP SIGNATURE----- -Version: GnuPG v2 +Version: GnuPG v2.0 -iQIcBAEBCAAGBQJUuMbXAAoJELp701BxlEWfow0QAMfWL9Zn8GLud8Lg2z88CGpX -2p6U3d7af70ztPPbMdnC8wiNTXhBQZiZBTMGFzyiwJgWfNNvy/BSm36zQWWx1yRm -zAoVvj8jwnjgky8Z3Uj/BCR7ZS5hR7s/vVf1piElgV0pPuD61CntwzYiVwXmLP8o -cEFFwtXbBF/lLPCdx2ugyO7Uneg2see3jB9ZPKQ0B8p8kN1swsayX6enjApp8U8n -GBrMI5jznX/+c0mPFe+xqPFBFTbCsik86CP/ZesrKQedyqS88tKUR8ju+OBc28lX -Y0IzjuozUwsj/6KPgFnRlH1yqHFyqzyGmqnvWSW+9GQ85uEtkK8MLFiqLfuSxedp -CSTU7Q+ORNDA50M98paPyxIJ9DXg5+rJKBWkmyBcsODNvKSrl09mle54J6KR2ayr -iCJMnE8jzH4UisO5fv4qn/0KtheT2rc8ZqgUvBvmJwZZH60vweAbF67cfX90iOpA -6viU88DCF2zjpNxd82lqQtwtTygq6G0NxaaEpvWTY65ssJNajVFolkph6iveyjEN -o10Kx6zo96W+t7HEnsmrMx+8IerqBDRtTLKC7TZ5fr1lrHIpmYFpQW5A54XnDwIs -eJhHPIibAcskkYuyPbtFRwRqV+qtIh8Ew/iDTCYh+ua7St59JYogcivMlnVXm7dZ -Px0CBBYF3uJGXp0G+qxM -=diaR +iQJ8BAEBCgBmBQJUuMoIXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w +ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQyQ0JDQjFGMzBDQ0UxMjFGNENDNDgxMDdC +OUQ0RjIzMUJEMTU1OEFCAAoJELnU8jG9FVirbvAP/AwEmK66JrS24+vB+UoBJPah +OEm2MGvbGDmvXLIbbKkNzhfjxlu7O1AyTZAnCvLqrCPDlWDxoa2Q1U9sSMWWZR66 +eKlPH41XQ2MBl6lo7i31ozuh8Ys6lvRtVoGANJ3EZHHgIROCl9tA1LfDwzozKdRj +wQcD110CrzcOEhtVtlq90wTe4PMLYlkF9MA7GU9TIOviV+ThW0LCCrP5so974H/w +FGD8QNrcX/vNXsxdqjLxvHAJx4bMMbV4zwSTWXDnzv9WOSNSjgS59Jft2Wda92s8 +ngqYlFEh+SmyLCNX5jqPRygBttvNpJYqReslKOFs/iYWnGo1FeJzoLK1+50ZfIjq +dz/yUiOMe9/xg3ABLRw8kV2paJSVAFNzF8wise3yCpMp0qGuV4Nzh29bP/alYuYh +636fvEcYs9aJmOqG9941lHPF3eC5Z0yLhUEHDQhSjFq1vPJ1yx90S382xa8Z3PDN +xF+jsartLnmS23ZuhrQCOHjAoFxBHq9aMP0LFWprIniG9L4/3DRvaXh2XwLArNjm +gg9kFulEJ6Y+PZ7B32KMc5LRMbRPHWKgUNJqmLWlKkpAcRedEbVpr7O8vrI0VDTw +WpLgOwlwcVlkl4Qy+6AeZ8+HQFeAebQZNDCTxWXumdow/ht4xrMcTLKBdHFlWpv+ +y06FUha5ZH8O9oWPIYqV +=K57Z -----END PGP SIGNATURE----- diff --git a/media-libs/jasper/jasper-1.900.1-r7.ebuild b/media-libs/jasper/jasper-1.900.1-r7.ebuild deleted file mode 100644 index 2025eeeaf107..000000000000 --- a/media-libs/jasper/jasper-1.900.1-r7.ebuild +++ /dev/null @@ -1,50 +0,0 @@ -# Copyright 1999-2014 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/media-libs/jasper/jasper-1.900.1-r7.ebuild,v 1.10 2014/12/26 09:18:04 ago Exp $ - -EAPI=5 - -# outdated './configure': breaks in 'USE=opengl ABI_X86="32 64"' case: -# uses /usr/lib64 for 32-bit ABI. -AUTOTOOLS_AUTORECONF=yes - -inherit autotools-multilib - -DESCRIPTION="software-based implementation of the codec specified in the JPEG-2000 Part-1 standard" -HOMEPAGE="http://www.ece.uvic.ca/~mdadams/jasper/" -SRC_URI=" - http://www.ece.uvic.ca/~mdadams/${PN}/software/${P}.zip - mirror://gentoo/${P}-fixes-20120611.patch.bz2" - -LICENSE="JasPer2.0" -SLOT="0" -KEYWORDS="alpha amd64 arm hppa ia64 ~mips ppc ppc64 ~s390 ~sh sparc x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~amd64-linux ~arm-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~x64-solaris ~x86-solaris" -IUSE="jpeg opengl static-libs" - -RDEPEND=" - jpeg? ( >=virtual/jpeg-0-r2:0[${MULTILIB_USEDEP}] ) - opengl? ( - >=virtual/opengl-7.0-r1:0[${MULTILIB_USEDEP}] - >=media-libs/freeglut-2.8.1:0[${MULTILIB_USEDEP}] - virtual/glu - )" -DEPEND="${RDEPEND} - app-arch/unzip" - -PATCHES=( - "${WORKDIR}"/${P}-fixes-20120611.patch - "${FILESDIR}"/${PN}-1.701.0-GL-ac.patch - "${FILESDIR}"/${PN}-1.701.0-GL.patch - "${FILESDIR}"/${PN}-CVE-2014-9029.patch - "${FILESDIR}"/${PN}-pkgconfig.patch - ) - -DOCS=( NEWS README doc/. ) - -src_configure() { - local myeconfargs=( - $(use_enable jpeg libjpeg) - $(use_enable opengl) - ) - autotools-multilib_src_configure -} -- 2.26.2