Version bump. This version fixes CVE-2011-0226 which allows an attacker to

execute arbitrary code. All users must upgrade ASAP. (bug #377143)

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0226

Remove vulnerable versions.

Package-Manager: portage-2.2.0_alpha49/cvs/Linux x86_64

diff --git a/media-libs/freetype/ChangeLog b/media-libs/freetype/ChangeLog
index acfa680219ff61fff10a2ebe70f5e62ad12220ce..06d7e09471c07733deb5bc4062e3d7c938e89b49 100644 (file)
--- a/media-libs/freetype/ChangeLog
+++ b/media-libs/freetype/ChangeLog
@@ -1,6 +1,17 @@
 # ChangeLog for media-libs/freetype
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/ChangeLog,v 1.293 2011/06/25 20:27:04 dirtyepic Exp $
+# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/ChangeLog,v 1.294 2011/07/31 07:03:37 dirtyepic Exp $
+
+*freetype-2.4.6 (31 Jul 2011)
+
+  31 Jul 2011; Ryan Hill <dirtyepic@gentoo.org> -freetype-2.4.4.ebuild,
+  -freetype-2.4.5.ebuild, +freetype-2.4.6.ebuild:
+  Version bump. This version fixes CVE-2011-0226 which allows an attacker to
+  execute arbitrary code. All users must upgrade ASAP. (bug #377143)
+
+  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0226
+
+  Remove vulnerable versions.
 
 *freetype-2.4.5 (25 Jun 2011)
 

diff --git a/media-libs/freetype/Manifest b/media-libs/freetype/Manifest
index fbd9eec0690862efc5f99a9e3427eda51c7d2a96..1657d314e02404d46ac9b51bd33bb5e0f0c7a698 100644 (file)
--- a/media-libs/freetype/Manifest
+++ b/media-libs/freetype/Manifest
@@ -14,21 +14,17 @@ AUX freetype-1.4_pre20080316-LDLFAGS.patch 1322 RMD160 c8a9123281039e9ae52ba7275
 AUX freetype-1.4_pre20080316-kpathsea_version.patch 1215 RMD160 b6c5fdc3e5c19038ffd341f2432ea4f9efaff59f SHA1 b9e1f1ebaad73a66ed3bf938289b7df2e10b8bdd SHA256 e95fa815f820fbc1391e49c9406d48dc310838053e174972c437000cc3c646da
 AUX freetype-2.3.2-enable-valid.patch 624 RMD160 88bc4de26daa91a09dda2ca1308319c0cf7dff4d SHA1 212c5c9e3362b3a058803bb5031358b5b92a1d29 SHA256 3c26cd8b92510490b4bdbdd12b078e33a4f8607eaee64a800c3ea23097d5d43b
 DIST freetype-1.4_pre20080316.tar.bz2 1199805 RMD160 5fb5b0737de968602008991c80dac827ea6fdca0 SHA1 73d4289f509213361b040dc9b649e27f810b133a SHA256 b88e8827dfeebcd0c663cac19c798acbd2f1129eaf89172eb26c3594700316a2
-DIST freetype-2.4.4.tar.bz2 1442053 RMD160 6b9b37ccdc8d1bfe0883f0e25df6de49ab30379e SHA1 1d136cbc51c67b212c91ba04dc5db797f35e64e6 SHA256 4b8281c7dc4d375c6b65d3c6f4808e488a313fab47d7be82aad2c871c8480fef
-DIST freetype-2.4.5.tar.bz2 1483537 RMD160 ec6719f2f851ebdb7135030ffd481d9ca53a54c1 SHA1 edc5217f1a0e3bec37f9846bb5203e8d005cf470 SHA256 73e835881b3413df8a0653b046048932794df0cfec9c4dd5adf28f64de445af2
-DIST freetype-doc-2.4.4.tar.bz2 104304 RMD160 04ed50a9608d36885073fa80d5df243d06f4851e SHA1 7b7277466608243a4d409c502a36bbbdada9ed47 SHA256 9205ea8899ae005ceede2c7d4ab6dfac6d669b16a9e4a0d49f90c081bc916ae3
-DIST freetype-doc-2.4.5.tar.bz2 106683 RMD160 7c6e46a0d7df532f384cdd88026e5616225b4d83 SHA1 45e817127d98a7685c94f3189029489eba1a74ca SHA256 2dc5dcb35a8c7f51ce885fc908c9c9b164ca65727926d9d5c7bff91fad0d3c9c
-DIST ft2demos-2.4.4.tar.bz2 161949 RMD160 e4fd361cace505cd36059fb12bb70c16318c02f0 SHA1 ca89e754deab2f5a90cd23ba782bf7bdd3c88623 SHA256 176091eacbc0a27a420f097ebc997b7d2b96c12143bf3a41d470a66879ca02c4
-DIST ft2demos-2.4.5.tar.bz2 162976 RMD160 9e5e78615ac23671af302d3814788ee67e060640 SHA1 fd1e4ea56b415708141c476dea95e02b1527199f SHA256 1b305408ef319414b89e387342f440c96736532795272186f02dd0968fb15ae5
+DIST freetype-2.4.6.tar.bz2 1487579 RMD160 9b01c88a53549af59c40d9dd5846cc5a34cbc181 SHA1 9d874398118c805478e81d80449dc4aa5a40b6f2 SHA256 24a4a57f3a6859887e91f90f93f754cfc7bf9ab9246a3a696435a0c6a7a1e92a
+DIST freetype-doc-2.4.6.tar.bz2 106666 RMD160 7075c46a21877549f3b4a1c85a6c0cce6a78e7f5 SHA1 6a067385da60857d89ae96760a750c78a8756afd SHA256 e34420cd7706b7b2357a3250ef685cdfbfad1d5284584127148c87ec40ba9524
+DIST ft2demos-2.4.6.tar.bz2 163000 RMD160 11057b0199c77cee2525f8166d12a3b11cf88458 SHA1 367e7904654671f1dcdb6efaf1e18ff7e3bd0d2c SHA256 5e1caebc0e95a610011a6c928533c36d09d1b4811c401988c3b3f50b3d06f381
 EBUILD freetype-1.4_pre20080316-r2.ebuild 3811 RMD160 50e9146f86b280a8b487a9bf10f5c5a86457a5da SHA1 8f0d640c5879750dab079c79357fddef7324ee33 SHA256 0086e81f79c162424d73e1046bb4ae4c7da9b4d7e25757ebd0b6910b4141a4b7
-EBUILD freetype-2.4.4.ebuild 3288 RMD160 9fa600f257c40b0ee5d5efbefd59743b3850e332 SHA1 ade8e8567d1c4aa744c5ff9cf39be2ff7ac5af0a SHA256 57cd7d209a916560480a0496ca0587eebf405a620a3ab570ae1c06c175956b20
-EBUILD freetype-2.4.5.ebuild 3387 RMD160 5b4d5c86e119c7f2c6933a71c0df75b498b45cc6 SHA1 4d16375f389d542c3dd803951918b4f55921c983 SHA256 cd3c5846ff280d5ffb846ec38413a9a277674de30ff703b666a07aeaa7b8bdcf
-MISC ChangeLog 44295 RMD160 c5ad1cab51df0e63e95ee6ccfc8a79e588449be7 SHA1 6d67f1e07b87254d83ccb2aba0f352dcfdf9897e SHA256 ff20d80422fc02362cfc1818d748cac750cbef7503501d0e74a81d320d4674c0
+EBUILD freetype-2.4.6.ebuild 3387 RMD160 35d592869252ca159989376f6790c28317fffeec SHA1 01afff03f8032a5e10204f44a78daf90146749ed SHA256 4b3bb37db6c6208c61f4e37e24b3b41c13273bd3e4c35ae2053ddbf7c2ae6433
+MISC ChangeLog 44691 RMD160 e7a4d641723e74a706aec36c4f863df17e2983c3 SHA1 aa1319b983bbf71055acf4799d59cf63ca2d72a6 SHA256 0f0df2feac4b60b93b4a66322bfbfd90a578e388d10954fd4f74e4d9d876fa88
 MISC metadata.xml 607 RMD160 876e7ed36a36576541170c5648230f8ed33c5c92 SHA1 32f2a18811819f1810f97665005964f805893eeb SHA256 88c9bca38a1cf56277afdd823aed27d2ef3746cb79f2e55e3cc88d33ee729e72
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.17 (GNU/Linux)
 
-iEYEARECAAYFAk4GRoUACgkQiqiDRvmkBmIJYwCfQTEdQeq+Lh6ogNlLwXJDbjBB
-S5IAoIQ1QyjWBdEWFf35m8KHr/r2pKHZ
-=nUJg
+iEYEARECAAYFAk41AF4ACgkQiqiDRvmkBmIx1wCePyxG3DENdAEwloOhZZ9F/F+V
+9XwAn02wsUBD10KGLYMWEIWwKD/2922I
+=MWKZ
 -----END PGP SIGNATURE-----

diff --git a/media-libs/freetype/freetype-2.4.4.ebuild b/media-libs/freetype/freetype-2.4.4.ebuild
deleted file mode 100644 (file)
index 4bc840d..0000000
--- a/media-libs/freetype/freetype-2.4.4.ebuild
+++ /dev/null
@@ -1,119 +0,0 @@
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/freetype-2.4.4.ebuild,v 1.7 2011/05/20 19:35:20 xarthisius Exp $
-
-EAPI="2"
-
-inherit eutils flag-o-matic libtool
-
-DESCRIPTION="A high-quality and portable font engine"
-HOMEPAGE="http://www.freetype.org/"
-SRC_URI="mirror://sourceforge/freetype/${P/_/}.tar.bz2
-       utils?  ( mirror://sourceforge/freetype/ft2demos-${PV}.tar.bz2 )
-       doc?    ( mirror://sourceforge/freetype/${PN}-doc-${PV}.tar.bz2 )"
-
-LICENSE="FTL GPL-2"
-SLOT="2"
-KEYWORDS="alpha amd64 arm hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86 ~sparc-fbsd ~x86-fbsd"
-IUSE="X auto-hinter bindist debug doc utils fontforge"
-
-DEPEND="sys-libs/zlib
-       X?      ( x11-libs/libX11
-                 x11-libs/libXau
-                 x11-libs/libXdmcp )"
-
-RDEPEND="${DEPEND}"
-
-src_prepare() {
-       enable_option() {
-               sed -i -e "/#define $1/a #define $1" \
-                       include/freetype/config/ftoption.h \
-                       || die "unable to enable option $1"
-       }
-
-       disable_option() {
-               sed -i -e "/#define $1/ { s:^:/*:; s:$:*/: }" \
-                       include/freetype/config/ftoption.h \
-                       || die "unable to disable option $1"
-       }
-
-       if ! use bindist; then
-               # See http://freetype.org/patents.html
-               # ClearType is covered by several Microsoft patents in the US
-               enable_option FT_CONFIG_OPTION_SUBPIXEL_RENDERING
-       fi
-
-       if use auto-hinter; then
-               disable_option TT_CONFIG_OPTION_BYTECODE_INTERPRETER
-               enable_option TT_CONFIG_OPTION_UNPATENTED_HINTING
-       fi
-
-       if use debug; then
-               enable_option FT_DEBUG_LEVEL_TRACE
-               enable_option FT_DEBUG_MEMORY
-       fi
-
-       disable_option FT_CONFIG_OPTION_OLD_INTERNALS
-
-       epatch "${FILESDIR}"/${PN}-2.3.2-enable-valid.patch
-
-       if use utils; then
-               cd "${WORKDIR}/ft2demos-${PV}"
-               sed -i -e "s:\.\.\/freetype2$:../freetype-${PV}:" Makefile
-               # Disable tests needing X11 when USE="-X". (bug #177597)
-               if ! use X; then
-                       sed -i -e "/EXES\ +=\ ftdiff/ s:^:#:" Makefile
-               fi
-       fi
-
-       elibtoolize
-       epunt_cxx
-}
-
-src_configure() {
-       append-flags -fno-strict-aliasing
-       type -P gmake &> /dev/null && export GNUMAKE=gmake
-       econf
-}
-
-src_compile() {
-       emake || die "emake failed"
-
-       if use utils; then
-               cd "${WORKDIR}/ft2demos-${PV}"
-               emake || die "ft2demos emake failed"
-       fi
-}
-
-src_install() {
-       emake DESTDIR="${D}" install || die "emake install failed"
-
-       dodoc ChangeLog README
-       dodoc docs/{CHANGES,CUSTOMIZE,DEBUG,*.txt,PROBLEMS,TODO}
-
-       use doc && dohtml -r docs/*
-
-       if use utils; then
-               rm "${WORKDIR}"/ft2demos-${PV}/bin/README
-               for ft2demo in ../ft2demos-${PV}/bin/*; do
-                       ./builds/unix/libtool --mode=install $(type -P install) -m 755 "$ft2demo" \
-                               "${D}"/usr/bin
-               done
-       fi
-
-       if use fontforge; then
-               # Probably fontforge needs less but this way makes things simplier...
-               einfo "Installing internal headers required for fontforge"
-               find src/truetype include/freetype/internal -name '*.h' | \
-               while read header; do
-                       mkdir -p "${D}/usr/include/freetype2/internal4fontforge/$(dirname ${header})"
-                       cp ${header} "${D}/usr/include/freetype2/internal4fontforge/$(dirname ${header})"
-               done
-       fi
-}
-
-pkg_postinst() {
-       elog "The TrueType bytecode interpreter is no longer patented and thus no"
-       elog "longer controlled by the bindist USE flag.  Enable the auto-hinter"
-       elog "USE flag if you want the old USE="bindist" hinting behavior."
-}

diff --git a/media-libs/freetype/freetype-2.4.5.ebuild b/media-libs/freetype/freetype-2.4.6.ebuild
similarity index 98%
rename from media-libs/freetype/freetype-2.4.5.ebuild
rename to media-libs/freetype/freetype-2.4.6.ebuild
index 428520dc34edfb851338fb062d0bef4cc245ef97..2513c886e2c2590808b07f3f25ec487e9c64a0a0 100644 (file)
--- a/media-libs/freetype/freetype-2.4.5.ebuild
+++ b/media-libs/freetype/freetype-2.4.6.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2011 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/freetype-2.4.5.ebuild,v 1.1 2011/06/25 20:27:04 dirtyepic Exp $
+# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/freetype-2.4.6.ebuild,v 1.1 2011/07/31 07:03:37 dirtyepic Exp $
 
 EAPI="4"