[PATCH] gnu: vips: Update to 8.15.3. [security fixes]

  • Done
  • quality assurance status badge
Details
2 participants
  • Nicolas Graves
  • Zheng Junjie
Owner
unassigned
Submitted by
Nicolas Graves
Severity
normal

Debbugs page

N
N
Nicolas Graves wrote on 7 Oct 15:05 -0700
(address . guix-patches@gnu.org)(name . Nicolas Graves)(address . ngraves@ngraves.fr)
20241007220550.6809-1-ngraves@ngraves.fr
This fixes CVE-2023-40032.

* gnu/packages/image-processing.scm (vips): Update to 8.15.3.
[build-system]: Switch to meson-build-system.
[inputs]: Add glib:bin.
---
gnu/packages/image-processing.scm | 11 +++++++----
1 file changed, 7 insertions(+), 4 deletions(-)

Toggle diff (51 lines)
diff --git a/gnu/packages/image-processing.scm b/gnu/packages/image-processing.scm
index 033e006d06..1a24837ac8 100644
--- a/gnu/packages/image-processing.scm
+++ b/gnu/packages/image-processing.scm
@@ -23,6 +23,7 @@
;;; Copyright © 2022 Tomasz Jeneralczyk <tj@schwi.pl>
;;; Copyright © 2022 Paul A. Patience <paul@apatience.com>
;;; Copyright © 2023 Cairn <cairn@pm.me>
+;;; Copyright © 2024 Nicolas Graves <ngraves@ngraves.fr>
;;;
;;; This file is part of GNU Guix.
;;;
@@ -49,6 +50,7 @@ (define-module (gnu packages image-processing)
#:use-module (guix build-system qt)
#:use-module (guix build-system cmake)
#:use-module (guix build-system gnu)
+ #:use-module (guix build-system meson)
#:use-module (guix build-system python)
#:use-module (guix build-system pyproject)
#:use-module (gnu packages)
@@ -776,16 +778,16 @@ (define-public opencv
(define-public vips
(package
(name "vips")
- (version "8.13.1")
+ (version "8.15.3")
(source
(origin
(method url-fetch)
(uri (string-append
"https://github.com/libvips/libvips/releases/download/v"
- version "/vips-" version ".tar.gz"))
+ version "/vips-" version ".tar.xz"))
(sha256
- (base32 "00kp3439jcqv9l2gcjg88xzvlq8clv54z1m3x66i3chvarz7ndxd"))))
- (build-system gnu-build-system)
+ (base32 "182j20dw38f1nyfx8cf7cjsr0k4nl7lfk3wm2d0ddypa6vsxj9ry"))))
+ (build-system meson-build-system)
(native-inputs
(list gobject-introspection pkg-config))
(inputs
@@ -793,6 +795,7 @@ (define-public vips
fftw
giflib
glib
+ (list glib "bin")
hdf5
imagemagick
lcms
--
2.46.0
Z
Z
Zheng Junjie wrote 46 hours ago
(name . Nicolas Graves via Guix-patches via)(address . guix-patches@gnu.org)
87y12r5ssy.fsf@iscas.ac.cn
Nicolas Graves via Guix-patches via <guix-patches@gnu.org> writes:

Toggle quote (59 lines)
> This fixes CVE-2023-40032.
>
> * gnu/packages/image-processing.scm (vips): Update to 8.15.3.
> [build-system]: Switch to meson-build-system.
> [inputs]: Add glib:bin.
> ---
> gnu/packages/image-processing.scm | 11 +++++++----
> 1 file changed, 7 insertions(+), 4 deletions(-)
>
> diff --git a/gnu/packages/image-processing.scm b/gnu/packages/image-processing.scm
> index 033e006d06..1a24837ac8 100644
> --- a/gnu/packages/image-processing.scm
> +++ b/gnu/packages/image-processing.scm
> @@ -23,6 +23,7 @@
> ;;; Copyright © 2022 Tomasz Jeneralczyk <tj@schwi.pl>
> ;;; Copyright © 2022 Paul A. Patience <paul@apatience.com>
> ;;; Copyright © 2023 Cairn <cairn@pm.me>
> +;;; Copyright © 2024 Nicolas Graves <ngraves@ngraves.fr>
> ;;;
> ;;; This file is part of GNU Guix.
> ;;;
> @@ -49,6 +50,7 @@ (define-module (gnu packages image-processing)
> #:use-module (guix build-system qt)
> #:use-module (guix build-system cmake)
> #:use-module (guix build-system gnu)
> + #:use-module (guix build-system meson)
> #:use-module (guix build-system python)
> #:use-module (guix build-system pyproject)
> #:use-module (gnu packages)
> @@ -776,16 +778,16 @@ (define-public opencv
> (define-public vips
> (package
> (name "vips")
> - (version "8.13.1")
> + (version "8.15.3")
> (source
> (origin
> (method url-fetch)
> (uri (string-append
> "https://github.com/libvips/libvips/releases/download/v"
> - version "/vips-" version ".tar.gz"))
> + version "/vips-" version ".tar.xz"))
> (sha256
> - (base32 "00kp3439jcqv9l2gcjg88xzvlq8clv54z1m3x66i3chvarz7ndxd"))))
> - (build-system gnu-build-system)
> + (base32 "182j20dw38f1nyfx8cf7cjsr0k4nl7lfk3wm2d0ddypa6vsxj9ry"))))
> + (build-system meson-build-system)
> (native-inputs
> (list gobject-introspection pkg-config))
> (inputs
> @@ -793,6 +795,7 @@ (define-public vips
> fftw
> giflib
> glib
> + (list glib "bin")
> hdf5
> imagemagick
> lcms

push, and add commit to fetch sources from git.
-----BEGIN PGP SIGNATURE-----
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=SJMR
-----END PGP SIGNATURE-----

Closed
?
Your comment

Commenting via the web interface is currently disabled.

To comment on this conversation send an email to 73683@patchwise.org

To respond to this issue using the mumi CLI, first switch to it
mumi current 73683
Then, you may apply the latest patchset in this issue (with sign off)
mumi am -- -s
Or, compose a reply to this issue
mumi compose
Or, send patches to this issue
mumi send-email *.patch