aboutsummaryrefslogtreecommitdiffstats
path: root/community/graphicsmagick/APKBUILD
diff options
context:
space:
mode:
authorFrancesco Colista <fcolista@alpinelinux.org>2017-09-05 12:27:22 +0000
committerFrancesco Colista <fcolista@alpinelinux.org>2017-09-05 12:27:28 +0000
commit4e1efd4523532a706d2af48c1a6f6740cb2d2edb (patch)
tree1c78b459cdaad503e078ab6dc5d8d9bf3d13d86e /community/graphicsmagick/APKBUILD
parent49794390171fe37829d0f4f162823b43917116dc (diff)
downloadaports-4e1efd4523532a706d2af48c1a6f6740cb2d2edb.tar.bz2
aports-4e1efd4523532a706d2af48c1a6f6740cb2d2edb.tar.xz
community/graphicsmagick: secfixes for CVE-2017-13775, CVE-2017-13776, CVE-2017-13777. Fixes #7789
Diffstat (limited to 'community/graphicsmagick/APKBUILD')
-rw-r--r--community/graphicsmagick/APKBUILD29
1 files changed, 16 insertions, 13 deletions
diff --git a/community/graphicsmagick/APKBUILD b/community/graphicsmagick/APKBUILD
index 778e0cbb0f..1ac42c64f5 100644
--- a/community/graphicsmagick/APKBUILD
+++ b/community/graphicsmagick/APKBUILD
@@ -2,15 +2,12 @@
# Maintainer: Francesco Colista <fcolista@alpinelinux.org>
pkgname=graphicsmagick
pkgver=1.3.26
-pkgrel=2
+pkgrel=3
pkgdesc="Image processing system"
url="http://www.graphicsmagick.org/"
arch="all"
license="MIT"
-depends=""
-depends_dev="jasper-dev libpng-dev tiff-dev libxml2-dev libwmf-dev"
-makedepends="$depends_dev libtool libltdl"
-install=""
+makedepends="jasper-dev libpng-dev tiff-dev libxml2-dev libwmf-dev libtool libltdl"
subpackages="$pkgname-dev $pkgname-doc"
source="http://downloads.sourceforge.net/$pkgname/$pkgname/$pkgver/GraphicsMagick-$pkgver.tar.xz
CVE-2017-11642.patch
@@ -18,12 +15,17 @@ source="http://downloads.sourceforge.net/$pkgname/$pkgname/$pkgver/GraphicsMagic
CVE-2017-12935.patch
CVE-2017-12936.patch
CVE-2017-12937.patch
- CVE-2017-13063-13064.patch"
-options="libtool"
-
+ CVE-2017-13063-13064.patch
+ CVE-2017-13775.patch
+ CVE-2017-13776-13777.patch"
+options="libtool !check"
builddir="$srcdir"/GraphicsMagick-$pkgver
# security fixes:
+# 1.3.26-r3:
+# - CVE-2017-13775
+# - CVE-2017-13776
+# - CVE-2017-13777
# 1.3.26-r2:
# - CVE-2017-11642
# - CVE-2017-11722
@@ -50,14 +52,13 @@ build() {
--with-modules \
--with-threads \
--with-gs-font-dir=/usr/share/fonts/Type1 \
- --with-quantum-depth=16 \
- || return 1
- make || return 1
+ --with-quantum-depth=16
+ make
}
package() {
cd "$builddir"
- make DESTDIR="$pkgdir" install || return 1
+ make DESTDIR="$pkgdir" install
}
sha512sums="b33ca0f1c858428693aee27a9089acff9e63d1110f85fa036894cfefe6274e7b2422758ea39852f94fdb4823c9c3f3c44b0d8906627503301f5928096f739f22 GraphicsMagick-1.3.26.tar.xz
@@ -66,4 +67,6 @@ f9167ad79f54fc3881d81b9b5cb5b84f38e847103c6945af4fda516d6696ff8e95ec48cbae84161f
2cb2ee3f88a835dff63c903bd215abb09c1812fedecbbb19c228fd2680c5762c6a20e6be1497c0fc3ed7a9b16eac6e7fe7f0fc9da4f6ef3e90fe75a049085ca7 CVE-2017-12935.patch
b78b61d7b29c2316ecefe69c473b1aa1e93185e0da245f7cf2d351566ff737bce8e560e9b471334549e4ab76bc8752717f403e7afa9d393bdd64e191f8abbb9c CVE-2017-12936.patch
508ceee0aa73744e9b36c6e60b071d4dc4a5254b4d5265c4ee2bde317713b831db8958667fac44aa1e89b3cc8094027cade368f10f7f5f3d1a2980c2a70d516d CVE-2017-12937.patch
-262434bab04541c276728111c9ec5d92abbb68e980813a50712d03505f3d3c4681b4daf02fd22e4ba11ed0daf5b553e4a47291c43f4c146554f1809292b73441 CVE-2017-13063-13064.patch"
+262434bab04541c276728111c9ec5d92abbb68e980813a50712d03505f3d3c4681b4daf02fd22e4ba11ed0daf5b553e4a47291c43f4c146554f1809292b73441 CVE-2017-13063-13064.patch
+b15d1c71a4f7e15cbc6a6a83590c99dfaf20d25f08e07a1ea8ff08f9e0f92d55da3a0afc86a259f88cae01ec0fa21c9b555a9085aae24f4bf3d36c48b29d56e5 CVE-2017-13775.patch
+f23c5e7d8e5c9e670ceb27b7e027910f181107033ec86538ce9778a2d37c29964008d5d8774bf59d4b45126b36630d73dc460636bfc55ab72ca64eefaae1768e CVE-2017-13776-13777.patch"