summary refs log tree commit diff
path: root/gnu/packages/image.scm
AgeCommit message (Collapse)Author
2017-07-10gnu: libtiff: Fix two integer overflows.Leo Famulari
* gnu/packages/patches/libtiff-tiffycbcrtorgb-integer-overflow.patch, gnu/packages/patches/libtiff-tiffycbcrtorgbinit-integer-overflow.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them. * gnu/packages/image.scm (libtiff-4.0.8)[source]: Use them.
2017-07-09gnu: libjpeg-turbo: Update to 1.5.2.Marius Bakke
* gnu/packages/image.scm (libjpeg-turbo): Update to 1.5.2. [arguments]<#:phases>: Remove.
2017-07-07gnu: libtiff: Fix CVE-2017-{9936,10688}.Alex Vong
* gnu/packages/patches/libtiff-CVE-2017-9936.patch, gnu/packages/patches/libtiff-CVE-2017-10688.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them. * gnu/packages/image.scm (libtiff-4.0.8)[source]: Use them. Signed-off-by: Leo Famulari <leo@famulari.name>
2017-07-03packages: Mark 'replacement' as an "innate" field.Ludovic Courtès
Suggested by Mark H Weaver at <https://lists.gnu.org/archive/html/guix-devel/2017-06/msg00355.html>. * guix/packages.scm (<package>)[replacement]: Mark as "innate". * gnu/packages/base.scm (glibc-2.25-patched, glibc-2.24) (glibc-2.23, glibc-2.22, glibc-2.21, glibc-locales): Remove 'replacement' field, which was set to #f. * gnu/packages/commencement.scm (perl-boot0): Likewise. * gnu/packages/fontutils.scm (graphite2/fixed): Likewise. * gnu/packages/ghostscript.scm (ghostscript/fixed): Likewise. * gnu/packages/gnupg.scm (libgcrypt-1.7.8): Likewise. * gnu/packages/guile.scm (guile-2.0/fixed, guile-2.2): Likewise. * gnu/packages/icu4c.scm (icu4c/fixed): Likewise. * gnu/packages/image.scm (libpng-apng): Likewise. * gnu/packages/make-bootstrap.scm (%guile-static): Likewise. * gnu/packages/pcre.scm (pcre/fixed): Likewise. * gnu/packages/perl.scm (perl/fixed): Likewise. * gnu/packages/ruby.scm (ruby-2.3, ruby-2.2, ruby-2.1) (ruby-1.8): Likewise. * gnu/packages/tls.scm (gnutls-3.5.13, gnutls/guile-2.2): Likewise. * gnu/packages/xml.scm (expat-2.2.1): Likewise.
2017-06-24gnu: Remove libwmf.Leo Famulari
This package contains many security vulnerabilities and is no longer maintained upstream. See this discussion for more information: https://lists.gnu.org/archive/html/guix-devel/2017-05/msg00478.html * gnu/packages/image.scm (libwmf): Remove variable. * gnu/packages/wv.scm (wv)[inputs]: Remove libwmf. [arguments]: Remove field. * gnu/packages/abiword.scm (abiword)[inputs]: Remove libwmf. [source]: Remove patch 'abiword-wmf-version-lookup-fix.patch'. * gnu/packages/patches/abiword-wmf-version-lookup-fix.patch, gnu/packages/patches/libwmf-CAN-2004-0941.patch, gnu/packages/patches/libwmf-CVE-2006-3376.patch, gnu/packages/patches/libwmf-CVE-2007-0455.patch, gnu/packages/patches/libwmf-CVE-2007-2756.patch, gnu/packages/patches/libwmf-CVE-2007-3472.patch, gnu/packages/patches/libwmf-CVE-2007-3473.patch, gnu/packages/patches/libwmf-CVE-2007-3477.patch, gnu/packages/patches/libwmf-CVE-2009-1364.patch, gnu/packages/patches/libwmf-CVE-2009-3546.patch, gnu/packages/patches/libwmf-CVE-2015-0848+CVE-2015-4588.patch, gnu/packages/patches/libwmf-CVE-2015-4695.patch, gnu/packages/patches/libwmf-CVE-2015-4696.patch: Delete files. * gnu/local.mk (dist_patch_DATA): Remove them.
2017-06-20gnu: Move contents of zip module into compression module.Arun Isaac
* gnu/packages/zip.scm (zip, unzip, zziplib, perl-zip): Move to... * gnu/packages/compression.scm: ...here. * gnu/packages/zip.scm: Delete file. * gnu/local.mk (GNU_SYSTEM_MODULES): Unregister deleted file. * po/packages/POTFILES.in: Unregister deleted file. * gnu/packages/{audio, avr, bioinformatics, busybox, cdrom, ci, compression, docbook, documentation, fonts, fpga, game-development, games, gl, gnome, gnuzilla, graphics, guile, haskell, image, java, kodi, ldc, libreoffice, markup, maths, mc, monitoring, music, php, pretty-print, python, scheme, smalltalk, statistics, synergy, tex, textutils, video, web-browsers, xml, zip}.scm, guix/build-system/{ant, font}.scm, guix/{download, packages}.scm: Adapt module import.
2017-06-16gnu: leptonica: Update to 1.74.4.Tobias Geerinckx-Rice
* gnu/packages/image.scm (leptonica): Update to 1.74.4.
2017-06-15gnu: libtiff: Fix several bugs related to improper codec usage [security fixes].Leo Famulari
Fixes CVE-2014-8128, CVE-2015-7554, CVE-2016-5318, CVE-2016-10095, and the other bugs listed in 'libtiff-tiffgetfield-bugs.patch'. * gnu/packages/patches/libtiff-tiffgetfield-bugs.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/image.scm (libtiff-4.0.8)[source]: Use it.
2017-06-11gnu: exiv2: Update to 0.26.Marius Bakke
* gnu/packages/image.scm (exiv2): Update to 0.26. [source]: Add new download location.
2017-05-29gnu: jasper: Update to 2.0.13.Leo Famulari
* gnu/packages/image.scm (jasper): Update to 2.0.13. [source]: Use GitHub URL and set the file-name. Remove 'jasper-CVE-2017-6850.patch'. * gnu/packages/patches/jasper-CVE-2017-6850.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it.
2017-05-29gnu: libtiff@4.0.8: Fix source URL.Ludovic Courtès
* gnu/packages/image.scm (libtiff-4.0.8)[origin]: Use 'ftp://' not 'http://'.
2017-05-28gnu: libtiff: Update replacement to 4.0.8 [security fixes].Leo Famulari
See 'ChangeLog' in the source distribution for more information about the bugs and security issues fixed in this release. * gnu/packages/image.scm (libtiff)[replacement]: Replace with libtiff-4.0.8. (libtiff/fixed): Replace with ... (libtiff-4.0.8): New variable. * gnu/packages/patches/libtiff-CVE-2017-7593.patch, gnu/packages/patches/libtiff-CVE-2017-7594.patch, gnu/packages/patches/libtiff-multiple-UBSAN-crashes.patch: Delete files. * gnu/local.mk (dist_patch_DATA): Remove them.
2017-05-20gnu: jbig2dec: Fix CVE-2017-{7885,7975,7976}.Leo Famulari
* gnu/packages/patches/jbig2dec-CVE-2017-7885.patch, gnu/packages/patches/jbig2dec-CVE-2017-7975.patch, gnu/packages/patches/jbig2dec-CVE-2017-7976.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them. * gnu/packages/image.scm (jbig2dec)[source]: Use them.
2017-05-09gnu: Add pngcrunch.Hartmut Goebel
* gnu/packages/image.scm (pngcrunch): New variable.
2017-05-07gnu: libtiff: Add fixes several security flaws.Kei Kebreau
Fixes CVE-2017-{7593, 7594, 7595, 7596, 7597, 7598, 7599, 7600, 7601, 7602}. * gnu/packages/patches/libtiff-CVE-2017-7593.patch, gnu/packages/patches/libtiff-CVE-2017-7594.patch, gnu/packages/patches/libtiff-multiple-UBSAN-crashes.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them. * gnu/packages/image.scm (libtiff)[replacement]: New field. (libtiff/fixed): New variable.
2017-04-21gnu: imlib2: Update to 1.4.10.Marius Bakke
* gnu/packages/image.scm (imlib2): Update to 1.4.10.
2017-04-12gnu: jasper: Fixx CVE-2017-6850.Efraim Flashner
* gnu/packages/image.scm (jasper)[source]: Add patch. * gnu/packages/patches/jasper-CVE-2017-6850.patch: New file. * gnu/local.mk (dist_patch_DATA): Register it.
2017-04-02gnu: jbig2dec: Fix CVE-2016-9601.Leo Famulari
* gnu/packages/patches/jbig2dec-CVE-2016-9601.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/image.scm (jbig2dec)[source]: Use it.
2017-03-24gnu: devil: Update to 1.8.0.Marius Bakke
* gnu/packages/patches/devil-CVE-2009-3994.patch, gnu/packages/patches/devil-fix-libpng.patch: Delete files. * gnu/local.mk (dist_patch_DATA): Remove them. * gnu/packages/image.scm (devil): Update to 1.8.0. [source]: Remove patches and snippet. [build-system]: Change to CMAKE-BUILD-SYSTEM. [arguments]: Disable tests. Remove #:configure-flags and add a 'change-directory' phase. Remove 'fix-tests' phase. [inputs]: Change LIBJPEG to LIBJPEG-TURBO.
2017-03-22gnu: freeimage: Fix build with GCC 5.Ricardo Wurmus
* gnu/packages/patches/freeimage-fix-build-with-gcc-5.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/image.scm (freeimage)[source]: Add patch.
2017-03-22Merge remote-tracking branch 'origin/master' into core-updatesEfraim Flashner
2017-03-21gnu: zimg: Update to 2.5.Efraim Flashner
* gnu/packages/image.scm (zimg): Update to 2.5.
2017-03-20gnu: openjpeg: Remove obsolete patches.Leo Famulari
* gnu/packages/patches/openjpeg-CVE-2016-5157.patch, gnu/packages/patches/openjpeg-CVE-2016-7163.patch: Delete files. * gnu/local.mk (dist_patch_DATA): Remove them. * gnu/packages/image.scm (openjpeg)[source]: Remove them.
2017-03-19Merge branch 'master' into core-updatesMark H Weaver
2017-03-19gnu: niftilib: Simplify build phases.Ricardo Wurmus
* gnu/packages/image.scm (niftilib)[arguments]: Use make-flags instead of replacing "configure" phase; simplify "install" phase.
2017-03-18gnu: Add niftilib.John Darrington
* gnu/packages/image.scm (niftilib): New variable.
2017-03-17gnu: libwebp: Update to 0.6.0.Marius Bakke
* gnu/packages/image.scm (libwebp): Update to 0.6.0. [source]: Remove patch. * gnu/packages/patches/libwebp-CVE-2016-9085.patch: Delete file. * gnu/local.mk (dist_patch_DATA): Remove it.
2017-03-17gnu: libpng-apng: Remove unnecessary call to libtool.Kei Kebreau
* gnu/packages/image.scm (libpng-apng)[phases]: Remove it.
2017-03-17gnu: Add libpng-apng.ng0
* gnu/packages/image.scm (libpng-apng): New variable. Co-authored-by: Kei Kebreau <kei@openmailbox.org>
2017-03-09Merge branch 'master' into core-updatesLudovic Courtès
2017-03-03gnu: jasper: Update to 2.0.12.Marius Bakke
* gnu/packages/image.scm (jasper): Update to 2.0.12.
2017-02-20gnu: libpng: Update to 1.6.28.Efraim Flashner
* gnu/packages/image.scm (libpng): Update to 1.6.28. [source]: Remove patch. * gnu/packages/patches/libpng-CVE-2016-10087.patch: Remove file. * gnu/local.mk (dist_patch_DATA): Remove it.
2017-02-20gnu: libpng: Update source urls.Efraim Flashner
* gnu/packages/image.scm (libpng)[source]: Add 'history' location for older versions.
2017-01-25gnu: openjpeg: Incorporate grafted changes.Leo Famulari
* gnu/packages/image.scm (openjpeg)[replacement]: Remove field. [source]: Update to 2.1.2. Add patches 'openjpeg-CVE-2016-9850-CVE-2016-9851.patch' and 'openjpeg-CVE-2016-9572-CVE-2016-9573.patch'. (openjpeg-1)[replacement]: Remove field. (openjpeg-2.1.2): Remove variable.
2017-01-25gnu: libtiff: Incorporate grafted patches.Leo Famulari
* gnu/packages/image.scm (libtiff)[replacement]: Remove field. [source]: Add patches from libtiff/fixed. (libtiff/fixed): Remove variable.
2017-01-25gnu: libpng: Incorporate grafted patch.Leo Famulari
* gnu/packages/image.scm (libpng)[replacement]: Remove field. [source]: Add patch 'libpng-CVE-2016-10087.patch'. (libpng-1.2)[replacement]: Remove field. (libpng/fixed): Remove variable.
2017-01-24gnu: openjpeg: Fix CVE-2016-{9572,9573}.Leo Famulari
* gnu/packages/patches/openjpeg-CVE-2016-9572-CVE-2016-9573.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/image.scm (openjpeg-2.1.2)[source]: Use it.
2017-01-23gnu: libtiff: Fix CVE-2017-5225.Leo Famulari
* gnu/packages/patches/libtiff-CVE-2017-5225.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/image.scm (libtiff/fixed)[source]: Use it.
2017-01-10gnu: libtiff: Fix CVE-2016-{10092,10093,10094} and others.Leo Famulari
* gnu/packages/patches/libtiff-CVE-2016-10092.patch, gnu/packages/patches/libtiff-CVE-2016-10093.patch, gnu/packages/patches/libtiff-CVE-2016-10094.patch, gnu/packages/patches/libtiff-assertion-failure.patch, gnu/packages/patches/libtiff-divide-by-zero-ojpeg.patch, gnu/packages/patches/libtiff-divide-by-zero-tiffcp.patch, gnu/packages/patches/libtiff-divide-by-zero-tiffcrop.patch, gnu/packages/patches/libtiff-divide-by-zero.patch, gnu/packages/patches/libtiff-heap-overflow-pixarlog-luv.patch, gnu/packages/patches/libtiff-heap-overflow-tif-dirread.patch, gnu/packages/patches/libtiff-heap-overflow-tiffcp.patch, gnu/packages/patches/libtiff-heap-overflow-tiffcrop.patch, gnu/packages/patches/libtiff-invalid-read.patch, gnu/packages/patches/libtiff-null-dereference.patch, gnu/packages/patches/libtiff-tiffcp-underflow.patch: New files. * gnu/local.mk (dist_patch_DATA): Add them. * gnu/packages/image.scm (libtiff)[replacement]: New field. (libtiff/fixed): New variable.
2017-01-04gnu: Use HTTPS for all sourceforge.net home pages.Tobias Geerinckx-Rice
* gnu/packages/admin.scm (mingetty, clusterssh)[home-page]: Use HTTPS. * gnu/packages/audio.scm (libbs2b, soxr)[home-page]: Likewise. * gnu/packages/bioinformatics.scm (bless)[home-page]: Likewise. * gnu/packages/display-managers.scm (slim)[home-page]: Likewise. * gnu/packages/games.scm (extremetuxracer)[home-page]: Likewise. * gnu/packages/ghostscript.scm (gs-fonts)[home-page]: Likewise. * gnu/packages/haskell.scm (ghc-regex-base, ghc-regex-posix, ghc-regex-compat)[home-page]: Likewise. * gnu/packages/image.scm (imlib2)[home-page]: Likewise. * gnu/packages/libreoffice.scm (librevenge, libcmis, libodfgen, libmwaw) [home-page]: Likewise. * gnu/packages/linux.scm (hdparm, acpid, libavc1394, rng-tools) [home-page]: Likewise. * gnu/packages/mail.scm (esmtp)[home-page]: Likewise. * gnu/packages/mp3.scm (ripperx)[home-page]: Likewise. * gnu/packages/onc-rpc.scm (libtirpc)[home-page]: Likewise. * gnu/packages/perl.scm (perl-czplib)[home-page]: Likewise. * gnu/packages/python.scm (python-pyasn1-modules)[home-page]: Likewise. * gnu/packages/xdisorg.scm (xosd)[home-page]: Likewise.
2017-01-02gnu: jasper: Update to 2.0.10.Efraim Flashner
* gnu/packages/image.scm (jasper): Update to 2.0.10.
2016-12-30gnu: libpng: Mention CVE-2016-10087.Leo Famulari
* gnu/packages/patches/libpng-fix-null-ptr-dereference.patch: Rename to ... * gnu/packages/patches/libpng-CVE-2016-10087.patch: ... this. * gnu/local.mk (dist_patch_DATA): Adjust. * gnu/packages/image.scm (libpng/fixed)[source]: Use renamed patch.
2016-12-29gnu: libpng-1.2: Update to 1.2.57 [security update].Leo Famulari
* gnu/packages/image.scm (libpng-1.2): Update to 1.2.57. [replacement]: New field.
2016-12-29gnu: libpng: Fix a null pointer dereference [fixes security issue].Leo Famulari
* gnu/packages/patches/libpng-fix-null-ptr-dereference.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/image.scm (libpng)[replacement]: New field. (libpng/fixed): New variable.
2016-12-25gnu: leptonica: Update to 1.74.0.Taylan Ulrich Bayırlı/Kammer
* gnu/packages/image.scm (leptonica): Update to 1.74.0. Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2016-12-13gnu: libjpeg-turbo: Fix typo.Alex Kost
This is a followup to commit e90a706e1686aaf3a1004683be8a3f3a4cbaf22e. * gnu/packages/image.scm (libjpeg-turbo): Remove extra "\".
2016-12-13gnu: libjpeg-turbo: Fix build on mips.Efraim Flashner
* gnu/packages/image.scm (libjpeg-turbo)[arguments]: Add substitution to set variable type before use.
2016-12-11Merge branch 'staging'Leo Famulari
2016-12-11gnu: openjpeg-2.1.2: Use a meaningful file-name for the source code.Leo Famulari
This is a followup to commit 0e8b7b1c351a2307bfc33211b4d76dbe7dfa01ef. * gnu/packages/image.scm (openjpeg-2.1.2)[source]: Give a meaningful file-name.
2016-12-11gnu: openjpeg: Update replacement to 2.1.2 [fixes CVE-2016-{7445,8332}].Leo Famulari
* gnu/packages/image.scm (openjpeg/fixed): Replace variable with ... (openjpeg-2.1.2): ... this. [patches]: Remove patches inherited from openjpeg. (openjpeg)[replacement]: Replace with openjpeg-2.1.2.
generated by cgit-pink 1.4.1 (git 2.36.1) at 2024-12-28 12:11:46 +0000