From: Ryan Hill Date: Sun, 31 Jul 2011 07:03:37 +0000 (+0000) Subject: Version bump. This version fixes CVE-2011-0226 which allows an attacker to X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=47da619cd1d4e817bf6cb11ea3a91a96156c5afc;p=gentoo.git Version bump. This version fixes CVE-2011-0226 which allows an attacker to execute arbitrary code. All users must upgrade ASAP. (bug #377143) http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0226 Remove vulnerable versions. Package-Manager: portage-2.2.0_alpha49/cvs/Linux x86_64 --- diff --git a/media-libs/freetype/ChangeLog b/media-libs/freetype/ChangeLog index acfa680219ff..06d7e09471c0 100644 --- a/media-libs/freetype/ChangeLog +++ b/media-libs/freetype/ChangeLog @@ -1,6 +1,17 @@ # ChangeLog for media-libs/freetype # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/ChangeLog,v 1.293 2011/06/25 20:27:04 dirtyepic Exp $ +# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/ChangeLog,v 1.294 2011/07/31 07:03:37 dirtyepic Exp $ + +*freetype-2.4.6 (31 Jul 2011) + + 31 Jul 2011; Ryan Hill -freetype-2.4.4.ebuild, + -freetype-2.4.5.ebuild, +freetype-2.4.6.ebuild: + Version bump. This version fixes CVE-2011-0226 which allows an attacker to + execute arbitrary code. All users must upgrade ASAP. (bug #377143) + + http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0226 + + Remove vulnerable versions. *freetype-2.4.5 (25 Jun 2011) diff --git a/media-libs/freetype/Manifest b/media-libs/freetype/Manifest index fbd9eec06908..1657d314e024 100644 --- a/media-libs/freetype/Manifest +++ b/media-libs/freetype/Manifest @@ -14,21 +14,17 @@ AUX freetype-1.4_pre20080316-LDLFAGS.patch 1322 RMD160 c8a9123281039e9ae52ba7275 AUX freetype-1.4_pre20080316-kpathsea_version.patch 1215 RMD160 b6c5fdc3e5c19038ffd341f2432ea4f9efaff59f SHA1 b9e1f1ebaad73a66ed3bf938289b7df2e10b8bdd SHA256 e95fa815f820fbc1391e49c9406d48dc310838053e174972c437000cc3c646da AUX freetype-2.3.2-enable-valid.patch 624 RMD160 88bc4de26daa91a09dda2ca1308319c0cf7dff4d SHA1 212c5c9e3362b3a058803bb5031358b5b92a1d29 SHA256 3c26cd8b92510490b4bdbdd12b078e33a4f8607eaee64a800c3ea23097d5d43b DIST freetype-1.4_pre20080316.tar.bz2 1199805 RMD160 5fb5b0737de968602008991c80dac827ea6fdca0 SHA1 73d4289f509213361b040dc9b649e27f810b133a SHA256 b88e8827dfeebcd0c663cac19c798acbd2f1129eaf89172eb26c3594700316a2 -DIST freetype-2.4.4.tar.bz2 1442053 RMD160 6b9b37ccdc8d1bfe0883f0e25df6de49ab30379e SHA1 1d136cbc51c67b212c91ba04dc5db797f35e64e6 SHA256 4b8281c7dc4d375c6b65d3c6f4808e488a313fab47d7be82aad2c871c8480fef -DIST freetype-2.4.5.tar.bz2 1483537 RMD160 ec6719f2f851ebdb7135030ffd481d9ca53a54c1 SHA1 edc5217f1a0e3bec37f9846bb5203e8d005cf470 SHA256 73e835881b3413df8a0653b046048932794df0cfec9c4dd5adf28f64de445af2 -DIST freetype-doc-2.4.4.tar.bz2 104304 RMD160 04ed50a9608d36885073fa80d5df243d06f4851e SHA1 7b7277466608243a4d409c502a36bbbdada9ed47 SHA256 9205ea8899ae005ceede2c7d4ab6dfac6d669b16a9e4a0d49f90c081bc916ae3 -DIST freetype-doc-2.4.5.tar.bz2 106683 RMD160 7c6e46a0d7df532f384cdd88026e5616225b4d83 SHA1 45e817127d98a7685c94f3189029489eba1a74ca SHA256 2dc5dcb35a8c7f51ce885fc908c9c9b164ca65727926d9d5c7bff91fad0d3c9c -DIST ft2demos-2.4.4.tar.bz2 161949 RMD160 e4fd361cace505cd36059fb12bb70c16318c02f0 SHA1 ca89e754deab2f5a90cd23ba782bf7bdd3c88623 SHA256 176091eacbc0a27a420f097ebc997b7d2b96c12143bf3a41d470a66879ca02c4 -DIST ft2demos-2.4.5.tar.bz2 162976 RMD160 9e5e78615ac23671af302d3814788ee67e060640 SHA1 fd1e4ea56b415708141c476dea95e02b1527199f SHA256 1b305408ef319414b89e387342f440c96736532795272186f02dd0968fb15ae5 +DIST freetype-2.4.6.tar.bz2 1487579 RMD160 9b01c88a53549af59c40d9dd5846cc5a34cbc181 SHA1 9d874398118c805478e81d80449dc4aa5a40b6f2 SHA256 24a4a57f3a6859887e91f90f93f754cfc7bf9ab9246a3a696435a0c6a7a1e92a +DIST freetype-doc-2.4.6.tar.bz2 106666 RMD160 7075c46a21877549f3b4a1c85a6c0cce6a78e7f5 SHA1 6a067385da60857d89ae96760a750c78a8756afd SHA256 e34420cd7706b7b2357a3250ef685cdfbfad1d5284584127148c87ec40ba9524 +DIST ft2demos-2.4.6.tar.bz2 163000 RMD160 11057b0199c77cee2525f8166d12a3b11cf88458 SHA1 367e7904654671f1dcdb6efaf1e18ff7e3bd0d2c SHA256 5e1caebc0e95a610011a6c928533c36d09d1b4811c401988c3b3f50b3d06f381 EBUILD freetype-1.4_pre20080316-r2.ebuild 3811 RMD160 50e9146f86b280a8b487a9bf10f5c5a86457a5da SHA1 8f0d640c5879750dab079c79357fddef7324ee33 SHA256 0086e81f79c162424d73e1046bb4ae4c7da9b4d7e25757ebd0b6910b4141a4b7 -EBUILD freetype-2.4.4.ebuild 3288 RMD160 9fa600f257c40b0ee5d5efbefd59743b3850e332 SHA1 ade8e8567d1c4aa744c5ff9cf39be2ff7ac5af0a SHA256 57cd7d209a916560480a0496ca0587eebf405a620a3ab570ae1c06c175956b20 -EBUILD freetype-2.4.5.ebuild 3387 RMD160 5b4d5c86e119c7f2c6933a71c0df75b498b45cc6 SHA1 4d16375f389d542c3dd803951918b4f55921c983 SHA256 cd3c5846ff280d5ffb846ec38413a9a277674de30ff703b666a07aeaa7b8bdcf -MISC ChangeLog 44295 RMD160 c5ad1cab51df0e63e95ee6ccfc8a79e588449be7 SHA1 6d67f1e07b87254d83ccb2aba0f352dcfdf9897e SHA256 ff20d80422fc02362cfc1818d748cac750cbef7503501d0e74a81d320d4674c0 +EBUILD freetype-2.4.6.ebuild 3387 RMD160 35d592869252ca159989376f6790c28317fffeec SHA1 01afff03f8032a5e10204f44a78daf90146749ed SHA256 4b3bb37db6c6208c61f4e37e24b3b41c13273bd3e4c35ae2053ddbf7c2ae6433 +MISC ChangeLog 44691 RMD160 e7a4d641723e74a706aec36c4f863df17e2983c3 SHA1 aa1319b983bbf71055acf4799d59cf63ca2d72a6 SHA256 0f0df2feac4b60b93b4a66322bfbfd90a578e388d10954fd4f74e4d9d876fa88 MISC metadata.xml 607 RMD160 876e7ed36a36576541170c5648230f8ed33c5c92 SHA1 32f2a18811819f1810f97665005964f805893eeb SHA256 88c9bca38a1cf56277afdd823aed27d2ef3746cb79f2e55e3cc88d33ee729e72 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (GNU/Linux) -iEYEARECAAYFAk4GRoUACgkQiqiDRvmkBmIJYwCfQTEdQeq+Lh6ogNlLwXJDbjBB -S5IAoIQ1QyjWBdEWFf35m8KHr/r2pKHZ -=nUJg +iEYEARECAAYFAk41AF4ACgkQiqiDRvmkBmIx1wCePyxG3DENdAEwloOhZZ9F/F+V +9XwAn02wsUBD10KGLYMWEIWwKD/2922I +=MWKZ -----END PGP SIGNATURE----- diff --git a/media-libs/freetype/freetype-2.4.4.ebuild b/media-libs/freetype/freetype-2.4.4.ebuild deleted file mode 100644 index 4bc840d84449..000000000000 --- a/media-libs/freetype/freetype-2.4.4.ebuild +++ /dev/null @@ -1,119 +0,0 @@ -# Copyright 1999-2011 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/freetype-2.4.4.ebuild,v 1.7 2011/05/20 19:35:20 xarthisius Exp $ - -EAPI="2" - -inherit eutils flag-o-matic libtool - -DESCRIPTION="A high-quality and portable font engine" -HOMEPAGE="http://www.freetype.org/" -SRC_URI="mirror://sourceforge/freetype/${P/_/}.tar.bz2 - utils? ( mirror://sourceforge/freetype/ft2demos-${PV}.tar.bz2 ) - doc? ( mirror://sourceforge/freetype/${PN}-doc-${PV}.tar.bz2 )" - -LICENSE="FTL GPL-2" -SLOT="2" -KEYWORDS="alpha amd64 arm hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86 ~sparc-fbsd ~x86-fbsd" -IUSE="X auto-hinter bindist debug doc utils fontforge" - -DEPEND="sys-libs/zlib - X? ( x11-libs/libX11 - x11-libs/libXau - x11-libs/libXdmcp )" - -RDEPEND="${DEPEND}" - -src_prepare() { - enable_option() { - sed -i -e "/#define $1/a #define $1" \ - include/freetype/config/ftoption.h \ - || die "unable to enable option $1" - } - - disable_option() { - sed -i -e "/#define $1/ { s:^:/*:; s:$:*/: }" \ - include/freetype/config/ftoption.h \ - || die "unable to disable option $1" - } - - if ! use bindist; then - # See http://freetype.org/patents.html - # ClearType is covered by several Microsoft patents in the US - enable_option FT_CONFIG_OPTION_SUBPIXEL_RENDERING - fi - - if use auto-hinter; then - disable_option TT_CONFIG_OPTION_BYTECODE_INTERPRETER - enable_option TT_CONFIG_OPTION_UNPATENTED_HINTING - fi - - if use debug; then - enable_option FT_DEBUG_LEVEL_TRACE - enable_option FT_DEBUG_MEMORY - fi - - disable_option FT_CONFIG_OPTION_OLD_INTERNALS - - epatch "${FILESDIR}"/${PN}-2.3.2-enable-valid.patch - - if use utils; then - cd "${WORKDIR}/ft2demos-${PV}" - sed -i -e "s:\.\.\/freetype2$:../freetype-${PV}:" Makefile - # Disable tests needing X11 when USE="-X". (bug #177597) - if ! use X; then - sed -i -e "/EXES\ +=\ ftdiff/ s:^:#:" Makefile - fi - fi - - elibtoolize - epunt_cxx -} - -src_configure() { - append-flags -fno-strict-aliasing - type -P gmake &> /dev/null && export GNUMAKE=gmake - econf -} - -src_compile() { - emake || die "emake failed" - - if use utils; then - cd "${WORKDIR}/ft2demos-${PV}" - emake || die "ft2demos emake failed" - fi -} - -src_install() { - emake DESTDIR="${D}" install || die "emake install failed" - - dodoc ChangeLog README - dodoc docs/{CHANGES,CUSTOMIZE,DEBUG,*.txt,PROBLEMS,TODO} - - use doc && dohtml -r docs/* - - if use utils; then - rm "${WORKDIR}"/ft2demos-${PV}/bin/README - for ft2demo in ../ft2demos-${PV}/bin/*; do - ./builds/unix/libtool --mode=install $(type -P install) -m 755 "$ft2demo" \ - "${D}"/usr/bin - done - fi - - if use fontforge; then - # Probably fontforge needs less but this way makes things simplier... - einfo "Installing internal headers required for fontforge" - find src/truetype include/freetype/internal -name '*.h' | \ - while read header; do - mkdir -p "${D}/usr/include/freetype2/internal4fontforge/$(dirname ${header})" - cp ${header} "${D}/usr/include/freetype2/internal4fontforge/$(dirname ${header})" - done - fi -} - -pkg_postinst() { - elog "The TrueType bytecode interpreter is no longer patented and thus no" - elog "longer controlled by the bindist USE flag. Enable the auto-hinter" - elog "USE flag if you want the old USE="bindist" hinting behavior." -} diff --git a/media-libs/freetype/freetype-2.4.5.ebuild b/media-libs/freetype/freetype-2.4.6.ebuild similarity index 98% rename from media-libs/freetype/freetype-2.4.5.ebuild rename to media-libs/freetype/freetype-2.4.6.ebuild index 428520dc34ed..2513c886e2c2 100644 --- a/media-libs/freetype/freetype-2.4.5.ebuild +++ b/media-libs/freetype/freetype-2.4.6.ebuild @@ -1,6 +1,6 @@ # Copyright 1999-2011 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/freetype-2.4.5.ebuild,v 1.1 2011/06/25 20:27:04 dirtyepic Exp $ +# $Header: /var/cvsroot/gentoo-x86/media-libs/freetype/freetype-2.4.6.ebuild,v 1.1 2011/07/31 07:03:37 dirtyepic Exp $ EAPI="4"