[PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452]

  • Done
  • quality assurance status badge
Details
2 participants
  • Ludovic Courtès
  • Bruno Victal
Owner
unassigned
Submitted by
Bruno Victal
Severity
normal

Debbugs page

B
B
Bruno Victal wrote on 2 Apr 2023 10:55
(address . guix-patches@gnu.org)(name . Bruno Victal)(address . mirai@makinata.eu)
4cb6ec46f0f4d337c66a5f96d86487c39d2cb1b7.1680458090.git.mirai@makinata.eu
* gnu/packages/photo.scm (libexif): Update to 0.6.24.
[source]: Switch to git checkout.
[native-inputs]: Add autoconf, automake, gettext-minimal and libtool.
---
gnu/packages/photo.scm | 17 +++++++++--------
1 file changed, 9 insertions(+), 8 deletions(-)

Toggle diff (34 lines)
diff --git a/gnu/packages/photo.scm b/gnu/packages/photo.scm
index 80fc963363..8df1034487 100644
--- a/gnu/packages/photo.scm
+++ b/gnu/packages/photo.scm
@@ -211,18 +211,19 @@ (define-public libraw
(define-public libexif
(package
(name "libexif")
- (version "0.6.22")
+ (version "0.6.24")
(source (origin
- (method url-fetch)
- (uri (string-append
- "https://github.com/libexif/libexif/releases"
- "/download/libexif-"
- (string-map (lambda (x) (if (char=? x #\.) #\_ x)) version)
- "-release/libexif-" version ".tar.xz"))
+ (method git-fetch)
+ (uri (git-reference
+ (url "https://github.com/libexif/libexif.git")
+ (commit (string-append "v" version))))
+ (file-name (git-file-name name version))
(sha256
(base32
- "0mhcad5zab7fsn120rd585h8ncwkq904nzzrq8vcd72hzk4g2j2h"))))
+ "0zi5vvb0khlzc6xyfayk6mjx5lgkrj8r7s8lfv4j7wkcgndjga0j"))))
(build-system gnu-build-system)
+ (native-inputs
+ (list autoconf automake gettext-minimal libtool))
(home-page "https://libexif.github.io/")
(synopsis "Read and manipulate EXIF data in digital photographs")
(description
--
2.39.2
B
B
Bruno Victal wrote on 4 Apr 2023 06:31
control-msg
(name . control)(address . control@debbugs.gnu.org)
b1c28681-d877-2cdd-db09-0895fa9a8a72@makinata.eu
tags 62324 patch
tags 61462 patch
tags 60788 - pending
tags 59971 wishlist
tags 51737 patch

tags 62624 + security
tags 49817 + security

# resend control-msg
close 37740


quit
L
L
Ludovic Courtès wrote on 6 Apr 2023 08:42
Re: bug#62624: [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452]
(name . Bruno Victal)(address . mirai@makinata.eu)(address . 62624-done@debbugs.gnu.org)
87pm8hhva6.fsf@gnu.org
Hi,

Bruno Victal <mirai@makinata.eu> skribis:

Toggle quote (4 lines)
> * gnu/packages/photo.scm (libexif): Update to 0.6.24.
> [source]: Switch to git checkout.
> [native-inputs]: Add autoconf, automake, gettext-minimal and libtool.

Applied, thanks!
Closed
?
Your comment

This issue is archived.

To comment on this conversation send an email to 62624@patchwise.org

To respond to this issue using the mumi CLI, first switch to it
mumi current 62624
Then, you may apply the latest patchset in this issue (with sign off)
mumi am -- -s
Or, compose a reply to this issue
mumi compose
Or, send patches to this issue
mumi send-email *.patch