GNU bug report logs

#62624 [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452]

PackageSource(s)Maintainer(s)
guix-patches PTS Buildd Popcon
Reply or subscribe to this bug. View this bug as an mbox, status mbox, or maintainer mbox

Report forwarded to guix-patches@gnu.org:
bug#62624; Package guix-patches. (Sun, 02 Apr 2023 18:05:02 GMT) (full text, mbox, link).


Acknowledgement sent to Bruno Victal <mirai@makinata.eu>:
New bug report received and forwarded. Copy sent to guix-patches@gnu.org. (Sun, 02 Apr 2023 18:05:02 GMT) (full text, mbox, link).


Message #5 received at submit@debbugs.gnu.org (full text, mbox, reply):

From: Bruno Victal <mirai@makinata.eu>
To: guix-patches@gnu.org
Cc: Bruno Victal <mirai@makinata.eu>
Subject: [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452]
Date: Sun, 2 Apr 2023 18:55:08 +0100
* gnu/packages/photo.scm (libexif): Update to 0.6.24.
[source]: Switch to git checkout.
[native-inputs]: Add autoconf, automake, gettext-minimal and libtool.
---
 gnu/packages/photo.scm | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/gnu/packages/photo.scm b/gnu/packages/photo.scm
index 80fc963363..8df1034487 100644
--- a/gnu/packages/photo.scm
+++ b/gnu/packages/photo.scm
@@ -211,18 +211,19 @@ (define-public libraw
 (define-public libexif
   (package
     (name "libexif")
-    (version "0.6.22")
+    (version "0.6.24")
     (source (origin
-              (method url-fetch)
-              (uri (string-append
-                    "https://github.com/libexif/libexif/releases"
-                    "/download/libexif-"
-                    (string-map (lambda (x) (if (char=? x #\.) #\_ x)) version)
-                    "-release/libexif-" version ".tar.xz"))
+              (method git-fetch)
+              (uri (git-reference
+                    (url "https://github.com/libexif/libexif.git")
+                    (commit (string-append "v" version))))
+              (file-name (git-file-name name version))
               (sha256
                (base32
-                "0mhcad5zab7fsn120rd585h8ncwkq904nzzrq8vcd72hzk4g2j2h"))))
+                "0zi5vvb0khlzc6xyfayk6mjx5lgkrj8r7s8lfv4j7wkcgndjga0j"))))
     (build-system gnu-build-system)
+    (native-inputs
+     (list autoconf automake gettext-minimal libtool))
     (home-page "https://libexif.github.io/")
     (synopsis "Read and manipulate EXIF data in digital photographs")
     (description
-- 
2.39.2





Added tag(s) security. Request was from Bruno Victal <mirai@makinata.eu> to control@debbugs.gnu.org. (Tue, 04 Apr 2023 13:32:02 GMT) (full text, mbox, link).


Reply sent to Ludovic Courtès <ludo@gnu.org>:
You have taken responsibility. (Thu, 06 Apr 2023 15:43:01 GMT) (full text, mbox, link).


Notification sent to Bruno Victal <mirai@makinata.eu>:
bug acknowledged by developer. (Thu, 06 Apr 2023 15:43:01 GMT) (full text, mbox, link).


Message #12 received at 62624-done@debbugs.gnu.org (full text, mbox, reply):

From: Ludovic Courtès <ludo@gnu.org>
To: Bruno Victal <mirai@makinata.eu>
Cc: 62624-done@debbugs.gnu.org
Subject: Re: bug#62624: [PATCH] gnu: libexif: Update to 0.6.24. [fixes CVE-2020-0198, CVE-2020-0452]
Date: Thu, 06 Apr 2023 17:42:25 +0200
Hi,

Bruno Victal <mirai@makinata.eu> skribis:

> * gnu/packages/photo.scm (libexif): Update to 0.6.24.
> [source]: Switch to git checkout.
> [native-inputs]: Add autoconf, automake, gettext-minimal and libtool.

Applied, thanks!




bug archived. Request was from Debbugs Internal Request <help-debbugs@gnu.org> to internal_control@debbugs.gnu.org. (Fri, 05 May 2023 11:24:05 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Dec 22 06:09:33 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.